Description
An authenticated command injection vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateways Command Line Interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeConnect SD-WAN
Default version status: unaffected
ECOS 9.3.x.x: 9.3.3.0 and below to ≤ <=9.3.3.0affectedECOS 9.2.x.x: 9.2.9.0 and below to ≤ <=9.2.9.0affectedECOS 9.1.x.x: 9.1.11.0 and below to ≤ <=9.1.11.0affectedECOS 9.0.x.x: all builds are affected and are out of maintenance. to ≤ <=9.0.x.xaffectedECOS 8.0.x.x: all builds are affected and are out of maintenance. to ≤ <=8.0.x.xaffected