Aruba Alert
2949Warning Date
Severity Level
Warning Number
Target Sector
14 December, 2022
● High
2022-5396
All
Aruba has released security updates to address several vulnerabilities in the following products:
- Aruba EdgeConnect Enterprise
- Enterprise Tenant Orchestrators
- 9.2.1.40179 and below
- 9.1.4.40436 and below
- 9.0.7.40110 and below
- 8.10.23.40015 and below
Attacker could exploit these vulnerabilities and achieve the following:
- Privilege Escalation
- SQL Injection
- Stored Cross Site Scripting (XSS)
- Command Execution
- Authentication Bypass
The CERT team encourages users to review Aruba security advisory and apply the necessary updates: