CVE-2022-37923high

CVE-2022-37923: falha de alta gravidade em Hewlett Packard Enterprise (HPE) Aruba…

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Aruba EdgeConnect Enterprise

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.2epss 1.5%
Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Hewlett Packard Enterprise (HPE) · Aruba EdgeConnect Enterprise Software
CVEs relacionadas — Hewlett Packard Enterprise (HPE) Aruba…

No mesmo produto, das mais perigosas para as menos.

CVE-2022-43541HIGHCVE-2022-43541EPSS 1.7%CVE-2022-37924HIGHCVE-2022-37924EPSS 1.7%CVE-2022-37922HIGHCVE-2022-37922EPSS 1.5%CVE-2022-37921HIGHCVE-2022-37921EPSS 1.5%CVE-2022-37920HIGHCVE-2022-37920EPSS 1.5%CVE-2022-44533HIGHCVE-2022-44533EPSS 1.4%