Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2022-37891
Analyzed
More InfoOfficial Page
Source-security-alert@hpe.com
View Known Exploited Vulnerability (KEV) details
Published At-07 Oct, 2022 | 18:15
Updated At-09 Nov, 2022 | 03:59

Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploitation results in the execution of arbitrary commands on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9 and below; Aruba InstantOS 8.10.x: 8.10.0.1 and below; ArubaOS 10.3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InnstantOS that address these security vulnerabilities.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.19.8CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Type: Primary
Version: 3.1
Base score: 9.8
Base severity: CRITICAL
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE Matches
Aruba Networks
arubanetworks
>>arubaos>>Versions from 10.3.0.0(inclusive) to 10.3.1.1(exclusive)
cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
Aruba Networks
arubanetworks
>>instant>>Versions from 6.4.0.0(inclusive) to 6.4.4.8-4.2.4.21(exclusive)
cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*
Aruba Networks
arubanetworks
>>instant>>Versions from 6.5.0.0(inclusive) to 6.5.4.24(exclusive)
cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*
Aruba Networks
arubanetworks
>>instant>>Versions from 8.6.0.0(inclusive) to 8.6.0.19(exclusive)
cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*
Aruba Networks
arubanetworks
>>instant>>Versions from 8.7.0.0(inclusive) to 8.7.1.10(exclusive)
cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*
Aruba Networks
arubanetworks
>>instant>>Versions from 8.10.0.0(inclusive) to 8.10.0.2(exclusive)
cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*
Siemens AG
siemens
>>scalance_w1750d_firmware>>*
cpe:2.3:o:siemens:scalance_w1750d_firmware:*:*:*:*:*:*:*:*
Siemens AG
siemens
>>scalance_w1750d>>-
cpe:2.3:h:siemens:scalance_w1750d:-:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-120Primarynvd@nist.gov
CWE ID: CWE-120
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://cert-portal.siemens.com/productcert/pdf/ssa-506569.pdfsecurity-alert@hpe.com
Third Party Advisory
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-014.txtsecurity-alert@hpe.com
Vendor Advisory
Hyperlink: https://cert-portal.siemens.com/productcert/pdf/ssa-506569.pdf
Source: security-alert@hpe.com
Resource:
Third Party Advisory
Hyperlink: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-014.txt
Source: security-alert@hpe.com
Resource:
Vendor Advisory
Change History
0Changes found
Details not found