Skip to content
OpenAdvisories
Medium WID-SEC-2023-1236 10 CVEs

Aruba EdgeConnect: Mehrere Schwachstellen ermöglichen Übernahme der Kontrolle

Published May 16, 2023 · Updated May 25, 2023 · Revision 4 · de-DE

Vendor: Aruba Product: EdgeConnect

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Aruba EdgeConnect ausnutzen, um Informationen offenzulegen und um die Kontrolle über das System zu übernehmen.

Product

Aruba EdgeConnect ist eine SD-WAN-Produktfamilie für Unternehmenskunden.

Vulnerabilities 10

  • High 7.2
    CVE-2023-30501

    Authenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line Interface

    Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrar…

    Hewlett Packard Enterprise (HPE) Aruba EdgeConnect Enterprise Software
  • High 7.2
    CVE-2023-30502

    Authenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line Interface

    Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrar…

    Hewlett Packard Enterprise (HPE) Aruba EdgeConnect Enterprise Software
  • High 7.2
    CVE-2023-30503

    Authenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line Interface

    Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrar…

    Hewlett Packard Enterprise (HPE) Aruba EdgeConnect Enterprise Software
  • High 7.2
    CVE-2023-30504

    Authenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line Interface

    Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrar…

    Hewlett Packard Enterprise (HPE) Aruba EdgeConnect Enterprise Software
  • High 7.2
    CVE-2023-30505

    Authenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line Interface

    Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrar…

    Hewlett Packard Enterprise (HPE) Aruba EdgeConnect Enterprise Software
  • High 7.2
    CVE-2023-30506

    Authenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line Interface

    Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrar…

    Hewlett Packard Enterprise (HPE) Aruba EdgeConnect Enterprise Software
  • Medium 4.9
    CVE-2023-30507

    Authenticated Remote Path Traversal in Aruba EdgeConnect Enterprise Command Line Interface

    Multiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface. Successful exploitation of these vulnerabilities result in the ability to read arbitrary files on the underlying operating system, includin…

    Hewlett Packard Enterprise (HPE) Aruba EdgeConnect Enterprise Software
  • Medium 4.9
    CVE-2023-30508

    Authenticated Remote Path Traversal in Aruba EdgeConnect Enterprise Command Line Interface

    Multiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface. Successful exploitation of these vulnerabilities result in the ability to read arbitrary files on the underlying operating system, includin…

    Hewlett Packard Enterprise (HPE) Aruba EdgeConnect Enterprise Software
  • Medium 4.9
    CVE-2023-30509

    Authenticated Remote Path Traversal in Aruba EdgeConnect Enterprise Command Line Interface

    Multiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface. Successful exploitation of these vulnerabilities result in the ability to read arbitrary files on the underlying operating system, includin…

    Hewlett Packard Enterprise (HPE) Aruba EdgeConnect Enterprise Software
  • Medium 4.1
    CVE-2023-30510

    Authenticated Server-side Request Forgery in Aruba EdgeConnect Enterprise Web Management Interface

    A vulnerability exists in the Aruba EdgeConnect Enterprise web management interface that allows remote authenticated users to issue arbitrary URL requests from the Aruba EdgeConnect Enterprise instance. The impact of this vulnerability is limited to a subset …

    Hewlett Packard Enterprise (HPE) Aruba EdgeConnect Enterprise Software

Revision history

  1. #4

    Neue Updates von Aruba aufgenommen

  2. #3

    Referenz(en) aufgenommen: ARUBA-PSA-2023-0007

  3. #2

    Neue Updates von Aruba

  4. #1

    Initiale Fassung

References