Description
A vulnerability in the web-based management interface of HPE Aruba Networking EdgeConnect SD-WAN gateway could allow an authenticated remote attacker to conduct a server-side prototype pollution attack. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Hewlett Packard Enterprise (HPE) | HPE Aruba Networking EdgeConnect SD-WAN | unaffected |
|
No data.
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-31257 | A vulnerability in the web-based management interface of HPE Aruba Networking EdgeConnect SD-WAN gateway could allow an authenticated remote attacker to conduct a server-side prototype pollution attack. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise. |
References
History
No history.
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: hpe
Published:
Updated: 2024-08-02T02:36:04.211Z
Reserved: 2024-04-23T14:21:30.435Z
Link: CVE-2024-33519
Vulnrichment
Updated: 2024-08-02T02:36:04.211Z
NVD
Status : Awaiting Analysis
Published: 2024-07-24T20:15:03.640
Modified: 2024-11-21T09:17:04.230
Link: CVE-2024-33519
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses