HPE Aruba Networking EdgeConnect SD-WAN Unauthenticated File Read Vulnerability in Command-Line Interface

A vulnerability exists in the command-line interface of HPE Aruba Networking EdgeConnect SD-WAN Gateways. It allows authenticated attackers to read arbitrary files from the underlying file system. Successful exploitation could lead to the unauthorized access and disclosure of sensitive information.

Impact

Exploitation of this vulnerability could result in unauthorized read access to sensitive data stored on the system.

Remediation

Users are advised to upgrade to HPE Aruba Networking EdgeConnect SD-WAN versions 9.5.4.1 or 9.4.4.2. For more details on HPE Aruba Networking's End-of-Support policy, please visit the HPE Aruba Networking Support Services End-of-Life page.