Remote Command Execution Vulnerability in HPE Aruba Networking EdgeConnect SD-WAN Gateway

CVE-2024-41134

Summary

A vulnerability has been identified in the Command Line Interface (CLI) of the HPE Aruba Networking EdgeConnect SD-WAN gateway. This flaw permits remote authenticated users to execute arbitrary commands on the underlying host operating system. When exploited, this vulnerability provides an attacker with the capability to run commands as the root user, potentially leading to a complete compromise of system integrity and security. Organizations utilizing affected versions of the EdgeConnect SD-WAN gateway must apply necessary security updates to mitigate this risk as soon as possible.

References