Skip to content
OpenAdvisories
High · 7.5 CVE-2022-37919 EUVD-2022-40526GHSA-pggj-w78v-rpr8

A vulnerability exists in the API of Aruba EdgeConnect Enterprise. An unauthenticated attacker can exploit this condition via the web-based…

Published Nov 30, 2022 · Updated Apr 24, 2025 · Assigned by hpe

Description

A vulnerability exists in the API of Aruba EdgeConnect Enterprise. An unauthenticated attacker can exploit this condition via the web-based management interface to create a denial-of-service condition which prevents the appliance from properly responding to API requests in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below;

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) Aruba EdgeConnect Enterprise Software ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below; —

Advisories 1

References