Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.
References
Link | Resource |
---|---|
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-018.txt | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: hpe
Published: 2022-11-30T19:08:31.129Z
Updated: 2022-12-12T12:11:04.548862Z
Reserved: 2022-08-08T18:45:22.554Z
Link: CVE-2022-37920
JSON object: View
NVD Information
Status : Modified
Published: 2022-12-12T13:15:13.567
Modified: 2023-11-07T03:49:55.770
Link: CVE-2022-37920
JSON object: View
Redhat Information
No data.
CWE