High WID-SEC-2024-1698 3 CVEs

Aruba EdgeConnect: Mehrere Schwachstellen

Published Jul 23, 2024 · Updated Jul 23, 2024 · de-DE

Vendor: Aruba Product: EdgeConnect Platform: Linux Platform: Windows

Summary

Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in Aruba EdgeConnect ausnutzen, um beliebigen Code auszuführen oder einen Cross-Site-Scripting-Angriff durchzuführen.

Product

Aruba EdgeConnect ist eine SD-WAN-Produktfamilie für Unternehmenskunden.

Vulnerabilities 3

High 8.1

CVE-2024-41914

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated r…

Hewlett Packard Enterprise HPE Aruba Networking EdgeConnect SD-WAN Orchestrator

Jul 24, 2024
High 7.2

CVE-2024-22443

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated r…

Hewlett Packard Enterprise HPE Aruba Networking EdgeConnect SD-WAN Orchestrator

Jul 24, 2024
Medium 6.1

CVE-2024-22444

A vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow a remote attac…

Hewlett Packard Enterprise HPE Aruba Networking EdgeConnect SD-WAN Orchestrator

Jul 24, 2024

Revision history

2024-07-23 #1
Initiale Fassung

References

HPE Security Bulletin vom 2024-07-23
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04672en_us&docLocale=en_US
HPE Aruba Networking Product Security Advisory vom 2024-07-23
https://csaf.arubanetworks.com/2024/hpe_aruba_networking_-_hpesbnw04672.txt