Aruba Networking EdgeConnect SD-WAN Gateways Command Injection Vulnerability

CVE-2024-41136

Summary

An authenticated command injection vulnerability exists within the command line interface of HPE Aruba Networking EdgeConnect SD-WAN gateways. Exploitation of this vulnerability grants malicious actors the capability to execute arbitrary commands as a privileged user in the underlying operating system. This poses significant security threats, compromising the integrity and confidentiality of the affected systems. Proper security measures and patches should be implemented to mitigate the risks associated with this vulnerability.

References