Lucene search

HpeCVE-2022-37924

HistoryDec 12, 2022 - 1:15 p.m.

CVE-2022-37924

2022-12-1213:15:13

hpe

web.nvd.nist.gov

aruba

edgeconnect

enterprise

vulnerability

cve-2022-37924

remote authenticated users

arbitrary commands

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

0.002

Percentile

52.2%

JSON

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.

Affected configurations

Nvd

Node

arubanetworksedgeconnect_enterpriseRange8.3.1.0–8.3.7.1

arubanetworksedgeconnect_enterpriseRange9.0.0.0–9.0.7.0

arubanetworksedgeconnect_enterpriseRange9.1.0.0–9.1.3.0

arubanetworksedgeconnect_enterpriseRange9.2.0.0–9.2.1.0

VendorProductVersionCPE
arubanetworksedgeconnect_enterprise*cpe:2.3:a:arubanetworks:edgeconnect_enterprise:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
arubanetworks	edgeconnect_enterprise	*	cpe:2.3:a:arubanetworks:edgeconnect_enterprise::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Aruba EdgeConnect Enterprise Software",
    "vendor": "Hewlett Packard Enterprise (HPE)",
    "versions": [
      {
        "status": "affected",
        "version": "ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below;"
      }
    ]
  }
]

References

www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-018.txt

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

0.002

Percentile

52.2%

JSON

Related for CVE-2022-37924