CVE-2024-22443: High severity aruba networks edgeconnect sd-wan vulnerability
A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a server-side prototype pollution attack. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-22443?
CVE-2024-22443 is considered a high severity vulnerability due to its potential for remote exploitation and command execution.
How do I fix CVE-2024-22443?
To fix CVE-2024-22443, you should upgrade your EdgeConnect SD-WAN Orchestrator to a version above 9.4.2.
Which versions of EdgeConnect SD-WAN Orchestrator are affected by CVE-2024-22443?
CVE-2024-22443 affects EdgeConnect SD-WAN Orchestrator versions 9.1.0 to 9.1.10, 9.2.0 to 9.2.10, 9.3.0 to 9.3.3, and 9.4.0 to 9.4.2.
Can CVE-2024-22443 be exploited without authentication?
No, CVE-2024-22443 requires that the attacker is an authenticated user to exploit the vulnerability.
What impact does CVE-2024-22443 have on systems?
Exploitation of CVE-2024-22443 could allow an attacker to execute arbitrary commands on the affected system, leading to potential data breaches or system compromise.