Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-22443

Опубликовано: 24 июл. 2024
Источник: nvd
CVSS3: 7.2
CVSS3: 8.8
EPSS Низкий

Описание

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a server-side prototype pollution attack. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*
Версия от 9.1.0 (включая) до 9.1.10 (исключая)
cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*
Версия от 9.2.0 (включая) до 9.2.10 (исключая)
cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*
Версия от 9.3.0 (включая) до 9.3.3 (исключая)
cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*
Версия от 9.4.0 (включая) до 9.4.2 (исключая)

EPSS

Процентиль: 73%
0.00795
Низкий

7.2 High

CVSS3

8.8 High

CVSS3

Дефекты

CWE-1321
CWE-1321

Связанные уязвимости

CVSS3: 7.2
github
больше 1 года назад

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a server-side prototype pollution attack. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.

EPSS

Процентиль: 73%
0.00795
Низкий

7.2 High

CVSS3

8.8 High

CVSS3

Дефекты

CWE-1321
CWE-1321