Unrated severityNVD Advisory· Published Aug 22, 2023· Updated Oct 3, 2024
Authenticated Remote Code Execution via Path Traversal in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
CVE-2023-37428
Description
A vulnerability in the EdgeConnect SD-WAN Orchestrator web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.
Affected products
2- Hewlett Packard Enterprise (HPE)/EdgeConnect SD-WAN Orchestratorv5Range: Orchestrator 9.3.x
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.