CVE-2022-43518: Path Traversal
An authenticated path traversal vulnerability exists in the Aruba EdgeConnect Enterprise web interface. Successful exploitation of this vulnerability results in the ability to read arbitrary files on the underlying operating system, including sensitive system files in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-43518?
CVE-2022-43518 is an authenticated path traversal vulnerability in the Aruba EdgeConnect Enterprise web interface.
How severe is CVE-2022-43518?
The severity of CVE-2022-43518 is rated as medium with a CVSS score of 6.5.
What can an attacker do with CVE-2022-43518?
An attacker can exploit CVE-2022-43518 to read arbitrary files on the underlying operating system, including sensitive system files.
Is there a fix available for CVE-2022-43518?
To address CVE-2022-43518, users should refer to the security advisory provided by the vendor Aruba Networks.