Skip to content
OpenAdvisories
High · 7.2 CVE-2022-44533 EUVD-2022-47476GHSA-xc7c-j6xx-gfqj

A vulnerability in the Aruba EdgeConnect Enterprise web management interface allows remote authenticated users to run arbitrary commands on…

Published Nov 30, 2022 · Updated Apr 24, 2025 · Assigned by hpe

Vendor: Hewlett Packard Enterprise (HPE) Product: Aruba EdgeConnect Enterprise Software

Description

A vulnerability in the Aruba EdgeConnect Enterprise web management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) Aruba EdgeConnect Enterprise Software ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below; —

Advisories 1

References