Remote Command Execution Vulnerability in EdgeConnect SD-WAN Gateway

CVE-2024-41133

Summary

A significant vulnerability exists in the Command Line Interface of the HPE Aruba Networking EdgeConnect SD-WAN gateway, allowing remote authenticated users to execute arbitrary commands on the underlying host system. If exploited, this vulnerability grants attackers the capability to run commands as a root user on the underlying operating system, which can lead to a complete compromise of the system. Organizations utilizing affected versions of the HPE Aruba Networking EdgeConnect SD-WAN gateway should take immediate action to secure their systems against potential exploitation.

References