CVE-2024-41136: Authenticated Command Injection in HPE Aruba Networking EdgeConnect SD-WAN Command Line Interface
An authenticated command injection vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateways Command Line Interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41136?
The severity of CVE-2024-41136 is high due to the possibility of executing arbitrary commands as a privileged user.
How do I fix CVE-2024-41136?
To fix CVE-2024-41136, update the HPE Aruba Networking EdgeConnect SD-WAN Orchestrator to the latest version that is not affected by this vulnerability.
What versions are affected by CVE-2024-41136?
CVE-2024-41136 affects HPE Aruba Networking EdgeConnect SD-WAN Orchestrator versions from 8.0.0 up to, but not including, 9.3.0.
Who can exploit CVE-2024-41136?
Authenticated users can exploit CVE-2024-41136 through the Command Line Interface of the HPE Aruba Networking EdgeConnect SD-WAN gateways.
What are the potential impacts of CVE-2024-41136?
The potential impacts of CVE-2024-41136 include unauthorized command execution that could compromise the underlying operating system.