CVE-2024-33519: Authenticated Server-Side prototype pollution Leading to Information Disclosure
A vulnerability in the web-based management interface of HPE Aruba Networking EdgeConnect SD-WAN gateway could allow an authenticated remote attacker to conduct a server-side prototype pollution attack. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-33519?
CVE-2024-33519 is a critical vulnerability that could allow an authenticated remote attacker to execute a server-side prototype pollution attack.
How do I fix CVE-2024-33519?
To fix CVE-2024-33519, update your HPE Aruba Networking EdgeConnect SD-WAN gateway to the latest patched version provided by the vendor.
What products are affected by CVE-2024-33519?
CVE-2024-33519 affects the HPE Aruba Networking EdgeConnect SD-WAN gateway.
Can CVE-2024-33519 be exploited remotely?
Yes, CVE-2024-33519 can be exploited by an authenticated remote attacker.
What type of attack is associated with CVE-2024-33519?
CVE-2024-33519 is associated with a server-side prototype pollution attack.