Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeConnect SD-WAN
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-41136 | ECOS 9.3.x.x: 9.3.3.0 and below – <=9.3.3.0 ; ECOS 9.2.x.x: 9.2.9.0 and below – <=9.2.9.0 ; ECOS 9.1.x.x: 9.1.11.0 and below – <=9.1.11.0 ; … | Authenticated Command Injection in HPE Aruba Networking EdgeConnect SD-WAN Command Line Interface | HIGH 8.8 | 0.9 % | ||
| CVE-2024-41135 | ECOS 9.3.x.x: 9.3.3.0 and below – <=9.3.3.0 ; ECOS 9.2.x.x: 9.2.9.0 and below – <=9.2.9.0 ; ECOS 9.1.x.x: 9.1.11.0 and below – <=9.1.11.0 ; … | Authenticated Remote Code Execution in HPE Aruba Networking EdgeConnect SD-WAN Command Line Interface | HIGH 7.2 | 0.8 % | ||
| CVE-2024-41134 | ECOS 9.3.x.x: 9.3.3.0 and below – <=9.3.3.0 ; ECOS 9.2.x.x: 9.2.9.0 and below – <=9.2.9.0 ; ECOS 9.1.x.x: 9.1.11.0 and below – <=9.1.11.0 ; … | Authenticated Remote Code Execution in HPE Aruba Networking EdgeConnect SD-WAN Command Line Interface | HIGH 7.2 | 0.7 % | ||
| CVE-2024-41133 | ECOS 9.3.x.x: 9.3.3.0 and below – <=9.3.3.0 ; ECOS 9.2.x.x: 9.2.9.0 and below – <=9.2.9.0 ; ECOS 9.1.x.x: 9.1.11.0 and below – <=9.1.11.0 ; … | Authenticated Remote Code Execution in HPE Aruba Networking EdgeConnect SD-WAN Command Line Interface | HIGH 7.2 | 0.8 % | ||
| CVE-2024-33519 | ECOS 9.3.x.x: 9.3.3.0 and below – <=9.3.3.0 ; ECOS 9.2.x.x: 9.2.9.0 and below – <=9.2.9.0 ; ECOS 9.1.x.x: 9.1.11.0 and below – <=9.1.11.0 ; … | Authenticated Server-Side prototype pollution Leading to Information Disclosure | HIGH 7.2 | 0.7 % |