CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
47.3%
A command injection flaw identified in the nslookup API in Silver Peak Unity ECOSTM (ECOS) appliance software could allow an attacker to execute arbitrary commands with the privileges of the web server running on the EdgeConnect appliance. An attacker could exploit this vulnerability to establish an interactive channel, effectively taking control of the target system. This vulnerability can be exploited by an attacker with authenticated access to the Orchestrator UI or EdgeConnect UI. This affects all ECOS versions prior to : 8.1.9.15, 8.3.0.8, 8.3.1.2, 8.3.2.0, 9.0.2.0, and 9.1.0.0.
Vendor | Product | Version | CPE |
---|---|---|---|
arubanetworks | vx-1000 | - | cpe:2.3:a:arubanetworks:vx-1000:-:*:*:*:*:*:*:* |
arubanetworks | vx-2000 | - | cpe:2.3:a:arubanetworks:vx-2000:-:*:*:*:*:*:*:* |
arubanetworks | vx-3000 | - | cpe:2.3:a:arubanetworks:vx-3000:-:*:*:*:*:*:*:* |
arubanetworks | vx-500 | - | cpe:2.3:a:arubanetworks:vx-500:-:*:*:*:*:*:*:* |
arubanetworks | vx-5000 | - | cpe:2.3:a:arubanetworks:vx-5000:-:*:*:*:*:*:*:* |
arubanetworks | vx-6000 | - | cpe:2.3:a:arubanetworks:vx-6000:-:*:*:*:*:*:*:* |
arubanetworks | vx-7000 | - | cpe:2.3:a:arubanetworks:vx-7000:-:*:*:*:*:*:*:* |
arubanetworks | vx-8000 | - | cpe:2.3:a:arubanetworks:vx-8000:-:*:*:*:*:*:*:* |
arubanetworks | vx-9000 | - | cpe:2.3:a:arubanetworks:vx-9000:-:*:*:*:*:*:*:* |
arubanetworks | nx-10700 | - | cpe:2.3:h:arubanetworks:nx-10700:-:*:*:*:*:*:*:* |
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
47.3%