vulnerability

Aruba ECOS: CVE-2023-30509: Authenticated Remote Path Traversal in Aruba EdgeConnect Enterprise Command Line Interface

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:M/C:C/I:N/A:N)

Published

May 23, 2023

Added

Mar 17, 2025

Modified

Apr 2, 2026

Description

Multiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface. Successful exploitation of these vulnerabilities result in the ability to read arbitrary files on the underlying operating system, including sensitive system files.

Solution

aruba-ecos-cve-2023-30509

References

CVE-2023-30509
https://attackerkb.com/topics/CVE-2023-30509
https://csaf.arubanetworking.hpe.com/2023/hpe_aruba_networking_-_2023-007.json
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-34924
CWE-22
EUVD-EUVD-2023-34924

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report