Edgeconnect Sd-wan Orchestrator vulnerabilities
31 known vulnerabilities in Edgeconnect Sd-wan Orchestrator from Aruba Networks. 31 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.0 High severity
EdgeConnect SD-WAN Gateways: Uncontrolled Resource Consumption
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause a denial-of-service against certain services running on impacted Gateways.
- 7.1 High severity
EdgeConnect SD-WAN Gateways: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to obtain limited information from memory and disrupt the normal operation of the affected service. Successful exploitation could result in a denial
- 7.2 High severity
EdgeConnect SD-WAN Gateways: Buffer Copy without Checking Size of Input
Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker to execute arbitrary commands as a privileged user on the underlying operating system.
- 7.2 High severity
EdgeConnect SD-WAN Gateways: Improper Neutralization of Special Elements used in an OS Command
A vulnerability exists in a component of the HPE Networking EdgeConnect SD-WAN Gateways that may allow for arbitrary command execution. An authenticated remote attacker could exploit this vulnerability by providing a specially crafted input to the affected com
- 7.2 High severity
EdgeConnect SD-WAN Gateways: Stack-based Buffer Overflow
A vulnerability exists in the configuration processing logic of the affected component where malformed input is improperly processed. An authenticated remote attacker with administrative privileges could exploit this vulnerability by providing specially crafte
- 7.5 High severity
EdgeConnect SD-WAN Gateways: Improper Authentication
Vulnerabilities have been identified in the web-based management interface of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an at
- 7.5 High severity
EdgeConnect SD-WAN Gateways: Improper Privilege Management
A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow a low-privilege authenticated remote attacker to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary s
- 7.5 High severity
EdgeConnect SD-WAN Gateways: Uncontrolled Resource Consumption
A vulnerability exists in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an unauthenticated remote attacker to conduct a denial-of-service attack on the affected service.
- 8.1 High severity
EdgeConnect SD-WAN Gateways: Integer Overflow or Wraparound
A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input that trig
- 8.1 High severity
EdgeConnect SD-WAN Gateways: Improper Authentication
Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to ga
- 8.1 High severity
EdgeConnect SD-WAN Gateways: Buffer Copy without Checking Size of Input
Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's cont
- 8.2 High severity
EdgeConnect SD-WAN Gateways: Buffer Copy without Checking Size of Input
A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited buffer overflow. Successful exploitation could allow an attacker to cause a denial-of-service or pot
- 8.5 High severity
EdgeConnect SD-WAN Gateways: Improper Access Control
A vulnerability in the API of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker with low privileges to access sensitive information beyond what is authorized by the user's existing privilege level. Successful exploitation could allow
- 8.5 High severity
EdgeConnect SD-WAN Gateways: Server-Side Request Forgery
Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remote attacker authenticated with low privileges to conduct server-side request forgery (SSRF) attacks. A successful exploit allows an attacker to enumerate information about the inte
- 8.6 High severity
EdgeConnect SD-WAN Gateways: Uncontrolled Resource Consumption
Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct denial-of-service attacks. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manua
- 8.8 High severity
EdgeConnect SD-WAN Gateways: Improper Privilege Management
A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow a low-privilege authenticated remote attacker to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary syste
- 8.8 High severity
EdgeConnect SD-WAN Gateways: Improper Privilege Management
A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged authenticated user to achieve administrative privilege on the web-management interface leading to complete system
- 8.8 High severity
EdgeConnect SD-WAN Gateways: Stack-based Buffer Overflow
Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to execute arbitrary code if certain preconditions outside of the attacker's control are met. Successf
- 9.1 Critical severity
EdgeConnect SD-WAN Gateways: Improper Neutralization of Special Elements used in a Command
A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with high privileges to execute arbitrary commands on the underlying operating system le
- 9.8 Critical severity
EdgeConnect SD-WAN Gateways: Buffer Copy without Checking Size of Input
Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to execute arbitrary code. Successful exploitation could allow an attacker to execute arb
- 9.8 Critical severity
EdgeConnect SD-WAN Gateways: Improper Authentication
Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrati
- 9.9 Critical severity
EdgeConnect SD-WAN Gateways: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information. An authenticated remote attacker with read-only privileges could exploit this vulnerability by sending a specially crafted request to the ca
- 9.9 Critical severity
EdgeConnect SD-WAN Gateways: Improper Privilege Management
Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated user to escalate their privileges to those of an administrative user, leading to
- 9.9 Critical severity
EdgeConnect SD-WAN Gateways: Improper Privilege Management
Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated user to escalate their privileges to those of an administrative user, leading to
- 8.8 High severity
HPE Aruba Networking EdgeConnect SD-WAN: Improper Neutralization of Special Elements used in an OS Command
An authenticated command injection vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateways Command Line Interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on t
- 7.2 High severity
HPE Aruba Networking EdgeConnect SD-WAN: Improper Neutralization of Special Elements used in a Command
A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateway's Command Line Interface that allows remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability will result in the abi
- 7.2 High severity
HPE Aruba Networking EdgeConnect SD-WAN: Improper Neutralization of Special Elements used in a Command
A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateway's Command Line Interface that allows remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability will result in the abi
- 7.2 High severity
HPE Aruba Networking EdgeConnect SD-WAN: Improper Neutralization of Special Elements used in a Command
A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateway's Command Line Interface that allows remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability will result in the abi
- 7.2 High severity
HPE Aruba Networking EdgeConnect SD-WAN: Improperly Controlled Modification of Object Prototype Attributes
A vulnerability in the web-based management interface of HPE Aruba Networking EdgeConnect SD-WAN gateway could allow an authenticated remote attacker to conduct a server-side prototype pollution attack. Successful exploitation of this vulnerability could allow
- 9.0 Critical severity
HPE Aruba Networking EdgeConnect SD-WAN…: Improper Neutralization of Input During Web Page Generation
A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit al
- 8.8 High severity
HPE Aruba Networking EdgeConnect SD-WAN…: Improperly Controlled Modification of Object Prototype Attributes
A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a server-side prototype pollution attack. Successful exploitation of this vulnerability could allow an attacker to