1. Home
  2. CVE Database
  3. CVE-2023-30504
HIGH · 7.2

CVE-2023-30504

Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of thes...

Vulnerability Description

Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.

CVSS Score

7.2

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
ArubanetworksEdgeconnect Enterprise<= 9.0.8.0

References

FAQ

What is CVE-2023-30504?

CVE-2023-30504 is a vulnerability with a CVSS score of 7.2 (HIGH). Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of thes...

How severe is CVE-2023-30504?

CVE-2023-30504 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-30504?

Check the references section above for vendor advisories and patch information. Affected products include: Arubanetworks Edgeconnect Enterprise.