CVE-2023-30506

Authenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line Interface

State: Published
Severity: 7.2 High
Published: May 16, 2023
Updated: Jan 31, 2025
Reserved: Apr 11, 2023

Description

Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.

Scores

CVSS	Score	Vector	Source
3.1	7.2 High	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	hpe
3.1	8.8 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Aruba EdgeConnect Enterprise SoftwareHewlett Packard Enterprise (HPE)	ECOS 9.2.x.x through 9.2.3.0Affected ECOS 9.1.x.x through 9.1.5.0Affected ECOS 9.0.x.x through 9.0.8.0Affected ECOS 8.x.x.x through allAffected

References

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-007.txt

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.