CVE-2023-30506: Authenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line Interface
Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.
Affected Software
Event History
Frequently Asked Questions
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2023-30506.
What is the severity level of CVE-2023-30506?
The severity level of CVE-2023-30506 is high.
Which versions of Aruba EdgeConnect Enterprise are affected by this vulnerability?
Versions up to and including 9.0.8.0, 9.1.0.0 to 9.1.5.0, and 9.2.0.0 to 9.2.3.0 of Aruba EdgeConnect Enterprise are affected by this vulnerability.
How can remote authenticated users exploit this vulnerability?
Remote authenticated users can exploit this vulnerability to run arbitrary commands on the underlying host.
Is there a fix available for this vulnerability?
Yes, please refer to the provided reference link for information on how to fix this vulnerability.