CVE-2022-37922high

CVE-2022-37922: high-severity vulnerability in Hewlett Packard Enterprise (HPE) Aruba…

Published · Updated

Follow this CVE+ Monitor Aruba EdgeConnect Enterprise

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.2epss 1.5%
Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
Hewlett Packard Enterprise (HPE) · Aruba EdgeConnect Enterprise Software
Related CVEs — Hewlett Packard Enterprise (HPE) Aruba…

In the same product, most dangerous first.

CVE-2022-43541HIGHCVE-2022-43541EPSS 1.7%CVE-2022-37924HIGHCVE-2022-37924EPSS 1.7%CVE-2022-37923HIGHCVE-2022-37923EPSS 1.5%CVE-2022-37921HIGHCVE-2022-37921EPSS 1.5%CVE-2022-37920HIGHCVE-2022-37920EPSS 1.5%CVE-2022-44533HIGHCVE-2022-44533EPSS 1.4%