vulnerability

Aruba ECOS: CVE-2023-30501: Authenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line Interface

Severity
8
CVSS
(AV:N/AC:L/Au:M/C:C/I:C/A:C)
Published
May 23, 2023
Added
Mar 17, 2025
Modified
Apr 2, 2026

Description

Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.

Solution

aruba-ecos-cve-2023-30501
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.