Vulnerabilities > Arubanetworks > Edgeconnect Enterprise > 8.3.0.0

DATE CVE VULNERABILITY TITLE RISK
2020-12-11 CVE-2020-12149 OS Command Injection vulnerability in Arubanetworks Edgeconnect Enterprise
The configuration backup/restore function in Silver Peak Unity ECOSTM (ECOS) appliance software was found to directly incorporate the user-controlled config filename in a subsequent shell command, allowing an attacker to manipulate the resulting command by injecting valid OS command input.
network
low complexity
arubanetworks CWE-78
6.8
6.8
2020-12-11 CVE-2020-12148 OS Command Injection vulnerability in Arubanetworks Edgeconnect Enterprise
A command injection flaw identified in the nslookup API in Silver Peak Unity ECOSTM (ECOS) appliance software could allow an attacker to execute arbitrary commands with the privileges of the web server running on the EdgeConnect appliance.
network
low complexity
arubanetworks CWE-78
6.8
6.8