CVE-2024-41134: Authenticated Remote Code Execution in HPE Aruba Networking EdgeConnect SD-WAN Command Line Interface
A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateway's Command Line Interface that allows remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability will result in the ability to execute arbitrary commands as root on the underlying operating system leading to complete system compromise
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41134?
CVE-2024-41134 has a high severity rating due to its potential to allow remote authenticated users to execute arbitrary commands on the host.
How do I fix CVE-2024-41134?
To fix CVE-2024-41134, update the HPE Aruba Networking EdgeConnect SD-WAN gateway to the latest version that addresses this vulnerability.
Who is affected by CVE-2024-41134?
CVE-2024-41134 affects users of the HPE Aruba Networking EdgeConnect SD-WAN gateway, specifically those using its Command Line Interface.
Can CVE-2024-41134 be exploited remotely?
Yes, CVE-2024-41134 can be exploited remotely by authenticated users to run arbitrary commands on the underlying host.
What are the implications of exploiting CVE-2024-41134?
Exploiting CVE-2024-41134 can lead to unauthorized command execution, potentially compromising the security and integrity of the affected systems.