7.2
CVE-2022-37921
- EPSS 0.77%
- Published 12.12.2022 13:15:13
- Last modified 21.11.2024 07:15:23
- Source security-alert@hpe.com
- Teams watchlist Login
- Open Login
Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.
Data is provided by the National Vulnerability Database (NVD)
Arubanetworks ≫ Edgeconnect Enterprise Version >= 8.3.1.0 <= 8.3.7.1
Arubanetworks ≫ Edgeconnect Enterprise Version >= 9.0.0.0 <= 9.0.7.0
Arubanetworks ≫ Edgeconnect Enterprise Version >= 9.1.0.0 <= 9.1.3.0
Arubanetworks ≫ Edgeconnect Enterprise Version >= 9.2.0.0 <= 9.2.1.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.77% | 0.726 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.2 | 1.2 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|
| security-alert@hpe.com | 7.2 | 1.2 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|