Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability in the Aruba EdgeConnect Enterprise Orchestrator web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba EdgeConnect Enterprise Orchestration Software version(s): Aruba EdgeConnect Enterprise Orchestrator (on-premises), Aruba EdgeConnect Enterprise Orchestrator-as-a-Service, Aruba EdgeConnect Enterprise Orchestrator-SP and Aruba EdgeConnect Enterprise Orchestrator Global Enterprise Tenant Orchestrators - Orchestrator 9.2.1.40179 and below, - Orchestrator 9.1.4.40436 and below, - Orchestrator 9.0.7.40110 and below, - Orchestrator 8.10.23.40015 and below, - Any older branches of Orchestrator not specifically mentioned.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
N/A
Vulnerability Title
Aruba Networks EdgeConnect Enterprise Orchestrator 安全漏洞
Vulnerability Description
Aruba Networks EdgeConnect Enterprise Orchestrator是美国Aruba Networks公司的一种集中式 SD-WAN 管理解决方案。为企业用户提供优化、管理、自动化和实时可见性和监控特性服务。 Aruba Networks EdgeConnect Enterprise Orchestrator 存在安全漏洞。攻击者利用该漏洞可以执行任意命令。以下产品及版本受到影响：Aruba EdgeConnect Enterprise Orchestrator 9.2.1
CVSS Information
N/A
Vulnerability Type
N/A