6.5Orta
CVE-2026-76697Authenticated Information Disclosure in HPE Networking EdgeConnect Enterprise Web-Based Management Interface
Açıklama
A vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by HPE Networking EdgeConnect SD-WAN Gateways.
Zayıflık türü (CWE):
CWE-200
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| arubanetworks | edgeconnect sd-wan orchestrator | 9.4.0 – < 9.4.11 | |
| Hewlett Packard Enterprise (HPE) | EdgeConnect SD-WAN Gateways | 9.7.0.0 – ≤ 9.7.0.0, 9.6.0.0 – ≤ 9.6.3.1, 9.5.0.0 – ≤ 9.5.8.1, 9.4.0.0 – ≤ 9.4.8.2 | |
| hpe | edgeconnect operating system | 9.4.0.0 – < 9.4.9.0 |
Kaynaklar ve yamalar
CPE eşleşmeleri (NVD) (8)
cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*≥ 9.4.0 < 9.4.11cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*≥ 9.5.0 < 9.5.9cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*≥ 9.6.0 < 9.6.4cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.7.0:*:*:*:*:*:*:*cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*≥ 9.4.0.0 < 9.4.9.0cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*≥ 9.5.0.0 < 9.5.9.0cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*≥ 9.6.0.0 < 9.6.4.0cpe:2.3:o:hpe:edgeconnect_operating_system:9.7.0.0:*:*:*:*:*:*:*