What is the severity of CVE-2024-22443?

CVE-2024-22443 is considered a high severity vulnerability due to its potential for remote exploitation and command execution.

How do I fix CVE-2024-22443?

To fix CVE-2024-22443, you should upgrade your EdgeConnect SD-WAN Orchestrator to a version above 9.4.2.

Which versions of EdgeConnect SD-WAN Orchestrator are affected by CVE-2024-22443?

CVE-2024-22443 affects EdgeConnect SD-WAN Orchestrator versions 9.1.0 to 9.1.10, 9.2.0 to 9.2.10, 9.3.0 to 9.3.3, and 9.4.0 to 9.4.2.

Can CVE-2024-22443 be exploited without authentication?

No, CVE-2024-22443 requires that the attacker is an authenticated user to exploit the vulnerability.

What impact does CVE-2024-22443 have on systems?

Exploitation of CVE-2024-22443 could allow an attacker to execute arbitrary commands on the affected system, leading to potential data breaches or system compromise.

Vulnerability/
CVE-2024-22443

high

8.8

CWE

1321

24/7/2024

1/8/2024

CVE-2024-22443

First published: Wed Jul 24 2024(Updated: )

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a server-side prototype pollution attack. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.

Credit: security-alert@hpe.com

Affected Software	Affected Version	How to fix
Arubanetworks Edgeconnect SD-WAN Orchestrator	>=9.1.0<9.1.10
Arubanetworks Edgeconnect SD-WAN Orchestrator	>=9.2.0<9.2.10
Arubanetworks Edgeconnect SD-WAN Orchestrator	>=9.3.0<9.3.3
Arubanetworks Edgeconnect SD-WAN Orchestrator	>=9.4.0<9.4.2

Never miss a vulnerability like this again

Reference Links

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04672en_us&docLocale=en_US

Frequently Asked Questions

What is the severity of CVE-2024-22443?
CVE-2024-22443 is considered a high severity vulnerability due to its potential for remote exploitation and command execution.
How do I fix CVE-2024-22443?
To fix CVE-2024-22443, you should upgrade your EdgeConnect SD-WAN Orchestrator to a version above 9.4.2.
Which versions of EdgeConnect SD-WAN Orchestrator are affected by CVE-2024-22443?
CVE-2024-22443 affects EdgeConnect SD-WAN Orchestrator versions 9.1.0 to 9.1.10, 9.2.0 to 9.2.10, 9.3.0 to 9.3.3, and 9.4.0 to 9.4.2.
Can CVE-2024-22443 be exploited without authentication?
No, CVE-2024-22443 requires that the attacker is an authenticated user to exploit the vulnerability.
What impact does CVE-2024-22443 have on systems?
Exploitation of CVE-2024-22443 could allow an attacker to execute arbitrary commands on the affected system, leading to potential data breaches or system compromise.

agent/references
agent/description
agent/type
agent/first-publish-date
agent/author
agent/severity
agent/weakness
agent/softwarecombine
agent/event
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/source
agent/tags
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/arubanetworks
canonical/arubanetworks edgeconnect sd-wan orchestrator
version/arubanetworks edgeconnect sd-wan orchestrator/9.1.0
version/arubanetworks edgeconnect sd-wan orchestrator/9.2.0
version/arubanetworks edgeconnect sd-wan orchestrator/9.3.0
version/arubanetworks edgeconnect sd-wan orchestrator/9.4.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.