Lucene search

[email protected]NVD:CVE-2022-37924

HistoryDec 12, 2022 - 1:15 p.m.

CVE-2022-37924

2022-12-1213:15:13

[email protected]

web.nvd.nist.gov

aruba edgeconnect

vulnerabilities

remote authenticated users

arbitrary commands

complete system compromise

cve-2022-37924

ecos 9.2.1.0

ecos 9.1.3.0

ecos 9.0.7.0

ecos 8.3.7.1

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

52.2%

JSON

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.

Affected configurations

Nvd

Node

arubanetworksedgeconnect_enterpriseRange8.3.1.0–8.3.7.1

arubanetworksedgeconnect_enterpriseRange9.0.0.0–9.0.7.0

arubanetworksedgeconnect_enterpriseRange9.1.0.0–9.1.3.0

arubanetworksedgeconnect_enterpriseRange9.2.0.0–9.2.1.0

VendorProductVersionCPE
arubanetworksedgeconnect_enterprise*cpe:2.3:a:arubanetworks:edgeconnect_enterprise:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
arubanetworks	edgeconnect_enterprise	*	cpe:2.3:a:arubanetworks:edgeconnect_enterprise::::::::

References

www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-018.txt

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

52.2%

JSON

Related for NVD:CVE-2022-37924

prion1 cve1 cvelist1