VYPR
← All advisories
Medium severity4.9NVD Advisory· Published May 16, 2023· Updated Jun 17, 2026

CVE-2023-30509

CVE-2023-30509

Description

Multiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface. Successful exploitation of these vulnerabilities result in the ability to read arbitrary files on the underlying operating system, including sensitive system files.

Affected products

3
  • Arubanetworks/Edgeconnect Enterprise2 versions
    cpe:2.3:a:arubanetworks:edgeconnect_enterprise:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:arubanetworks:edgeconnect_enterprise:*:*:*:*:*:*:*:*range: <=9.0.8.0
    • (no CPE)
  • Hewlett Packard Enterprise (HPE)/Aruba EdgeConnect Enterprise Softwarev5
    Range: ECOS 9.2.x.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.