9.8

CVE-2022-37888

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a privileged user on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9 and below; Aruba InstantOS 8.10.x: 8.10.0.1 and below; ArubaOS 10.3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InnstantOS that address these security vulnerabilities.

Data is provided by the National Vulnerability Database (NVD)
Arubanetworks ≫ Arubaos Version >= 10.3.0.0 < 10.3.1.1
   Arubanetworks ≫ Ap-103 Version-
   Arubanetworks ≫ Ap-114 Version-
   Arubanetworks ≫ Ap-115 Version-
   Arubanetworks ≫ Ap-120 Version-
   Arubanetworks ≫ Ap-121 Version-
   Arubanetworks ≫ Ap-130 Version-
   Arubanetworks ≫ Ap-135 Version-
   Arubanetworks ≫ Ap-204 Version-
   Arubanetworks ≫ Ap-205 Version-
   Arubanetworks ≫ Ap-207 Version-
   Arubanetworks ≫ Ap-214 Version-
   Arubanetworks ≫ Ap-215 Version-
   Arubanetworks ≫ Ap-224 Version-
   Arubanetworks ≫ Ap-225 Version-
   Arubanetworks ≫ Ap-303 Version-
   Arubanetworks ≫ Ap-304 Version-
   Arubanetworks ≫ Ap-305 Version-
   Arubanetworks ≫ Ap-314 Version-
   Arubanetworks ≫ Ap-315 Version-
   Arubanetworks ≫ Ap-318 Version-
   Arubanetworks ≫ Ap-324 Version-
   Arubanetworks ≫ Ap-325 Version-
   Arubanetworks ≫ Ap-334 Version-
   Arubanetworks ≫ Ap-340 Version-
   Arubanetworks ≫ Ap-370 Version-
   Arubanetworks ≫ Ap-504 Version-
   Arubanetworks ≫ Ap-505 Version-
   Arubanetworks ≫ Ap-514 Version-
   Arubanetworks ≫ Ap-515 Version-
   Arubanetworks ≫ Ap-534 Version-
   Arubanetworks ≫ Ap-535 Version-
   Arubanetworks ≫ Ap-555 Version-
   Arubanetworks ≫ Ap-635 Version-
   Arubanetworks ≫ Ap-655 Version-
   Arubanetworks ≫ Iap-103 Version-
   Arubanetworks ≫ Iap-114 Version-
   Arubanetworks ≫ Iap-115 Version-
   Arubanetworks ≫ Iap-204 Version-
   Arubanetworks ≫ Iap-205 Version-
   Arubanetworks ≫ Iap-207 Version-
   Arubanetworks ≫ Iap-224 Version-
   Arubanetworks ≫ Iap-225 Version-
   Arubanetworks ≫ Iap-304 Version-
   Arubanetworks ≫ Iap-305 Version-
   Arubanetworks ≫ Iap-314 Version-
   Arubanetworks ≫ Iap-315 Version-
   Arubanetworks ≫ Iap-318 Version-
   Arubanetworks ≫ Iap-324 Version-
   Arubanetworks ≫ Iap-325 Version-
   Arubanetworks ≫ Iap-334 Version-
   Arubanetworks ≫ Rap-108 Version-
   Arubanetworks ≫ Rap-109 Version-
Arubanetworks ≫ Instant Version >= 6.4.0.0 < 6.4.4.8-4.2.4.21
   Arubanetworks ≫ Ap-103 Version-
   Arubanetworks ≫ Ap-114 Version-
   Arubanetworks ≫ Ap-115 Version-
   Arubanetworks ≫ Ap-120 Version-
   Arubanetworks ≫ Ap-121 Version-
   Arubanetworks ≫ Ap-130 Version-
   Arubanetworks ≫ Ap-135 Version-
   Arubanetworks ≫ Ap-204 Version-
   Arubanetworks ≫ Ap-205 Version-
   Arubanetworks ≫ Ap-207 Version-
   Arubanetworks ≫ Ap-214 Version-
   Arubanetworks ≫ Ap-215 Version-
   Arubanetworks ≫ Ap-224 Version-
   Arubanetworks ≫ Ap-225 Version-
   Arubanetworks ≫ Ap-303 Version-
   Arubanetworks ≫ Ap-304 Version-
   Arubanetworks ≫ Ap-305 Version-
   Arubanetworks ≫ Ap-314 Version-
   Arubanetworks ≫ Ap-315 Version-
   Arubanetworks ≫ Ap-318 Version-
   Arubanetworks ≫ Ap-324 Version-
   Arubanetworks ≫ Ap-325 Version-
   Arubanetworks ≫ Ap-334 Version-
   Arubanetworks ≫ Ap-340 Version-
   Arubanetworks ≫ Ap-370 Version-
   Arubanetworks ≫ Ap-504 Version-
   Arubanetworks ≫ Ap-505 Version-
   Arubanetworks ≫ Ap-514 Version-
   Arubanetworks ≫ Ap-515 Version-
   Arubanetworks ≫ Ap-534 Version-
   Arubanetworks ≫ Ap-535 Version-
   Arubanetworks ≫ Ap-555 Version-
   Arubanetworks ≫ Ap-635 Version-
   Arubanetworks ≫ Ap-655 Version-
   Arubanetworks ≫ Iap-103 Version-
   Arubanetworks ≫ Iap-114 Version-
   Arubanetworks ≫ Iap-115 Version-
   Arubanetworks ≫ Iap-204 Version-
   Arubanetworks ≫ Iap-205 Version-
   Arubanetworks ≫ Iap-207 Version-
   Arubanetworks ≫ Iap-224 Version-
   Arubanetworks ≫ Iap-225 Version-
   Arubanetworks ≫ Iap-304 Version-
   Arubanetworks ≫ Iap-305 Version-
   Arubanetworks ≫ Iap-314 Version-
   Arubanetworks ≫ Iap-315 Version-
   Arubanetworks ≫ Iap-318 Version-
   Arubanetworks ≫ Iap-324 Version-
   Arubanetworks ≫ Iap-325 Version-
   Arubanetworks ≫ Iap-334 Version-
   Arubanetworks ≫ Rap-108 Version-
   Arubanetworks ≫ Rap-109 Version-
Arubanetworks ≫ Instant Version >= 6.5.0.0 < 6.5.4.24
   Arubanetworks ≫ Ap-103 Version-
   Arubanetworks ≫ Ap-114 Version-
   Arubanetworks ≫ Ap-115 Version-
   Arubanetworks ≫ Ap-120 Version-
   Arubanetworks ≫ Ap-121 Version-
   Arubanetworks ≫ Ap-130 Version-
   Arubanetworks ≫ Ap-135 Version-
   Arubanetworks ≫ Ap-204 Version-
   Arubanetworks ≫ Ap-205 Version-
   Arubanetworks ≫ Ap-207 Version-
   Arubanetworks ≫ Ap-214 Version-
   Arubanetworks ≫ Ap-215 Version-
   Arubanetworks ≫ Ap-224 Version-
   Arubanetworks ≫ Ap-225 Version-
   Arubanetworks ≫ Ap-303 Version-
   Arubanetworks ≫ Ap-304 Version-
   Arubanetworks ≫ Ap-305 Version-
   Arubanetworks ≫ Ap-314 Version-
   Arubanetworks ≫ Ap-315 Version-
   Arubanetworks ≫ Ap-318 Version-
   Arubanetworks ≫ Ap-324 Version-
   Arubanetworks ≫ Ap-325 Version-
   Arubanetworks ≫ Ap-334 Version-
   Arubanetworks ≫ Ap-340 Version-
   Arubanetworks ≫ Ap-370 Version-
   Arubanetworks ≫ Ap-504 Version-
   Arubanetworks ≫ Ap-505 Version-
   Arubanetworks ≫ Ap-514 Version-
   Arubanetworks ≫ Ap-515 Version-
   Arubanetworks ≫ Ap-534 Version-
   Arubanetworks ≫ Ap-535 Version-
   Arubanetworks ≫ Ap-555 Version-
   Arubanetworks ≫ Ap-635 Version-
   Arubanetworks ≫ Ap-655 Version-
   Arubanetworks ≫ Iap-103 Version-
   Arubanetworks ≫ Iap-114 Version-
   Arubanetworks ≫ Iap-115 Version-
   Arubanetworks ≫ Iap-204 Version-
   Arubanetworks ≫ Iap-205 Version-
   Arubanetworks ≫ Iap-207 Version-
   Arubanetworks ≫ Iap-224 Version-
   Arubanetworks ≫ Iap-225 Version-
   Arubanetworks ≫ Iap-304 Version-
   Arubanetworks ≫ Iap-305 Version-
   Arubanetworks ≫ Iap-314 Version-
   Arubanetworks ≫ Iap-315 Version-
   Arubanetworks ≫ Iap-318 Version-
   Arubanetworks ≫ Iap-324 Version-
   Arubanetworks ≫ Iap-325 Version-
   Arubanetworks ≫ Iap-334 Version-
   Arubanetworks ≫ Rap-108 Version-
   Arubanetworks ≫ Rap-109 Version-
Arubanetworks ≫ Instant Version >= 8.6.0.0 < 8.6.0.19
   Arubanetworks ≫ Ap-103 Version-
   Arubanetworks ≫ Ap-114 Version-
   Arubanetworks ≫ Ap-115 Version-
   Arubanetworks ≫ Ap-120 Version-
   Arubanetworks ≫ Ap-121 Version-
   Arubanetworks ≫ Ap-130 Version-
   Arubanetworks ≫ Ap-135 Version-
   Arubanetworks ≫ Ap-204 Version-
   Arubanetworks ≫ Ap-205 Version-
   Arubanetworks ≫ Ap-207 Version-
   Arubanetworks ≫ Ap-214 Version-
   Arubanetworks ≫ Ap-215 Version-
   Arubanetworks ≫ Ap-224 Version-
   Arubanetworks ≫ Ap-225 Version-
   Arubanetworks ≫ Ap-303 Version-
   Arubanetworks ≫ Ap-304 Version-
   Arubanetworks ≫ Ap-305 Version-
   Arubanetworks ≫ Ap-314 Version-
   Arubanetworks ≫ Ap-315 Version-
   Arubanetworks ≫ Ap-318 Version-
   Arubanetworks ≫ Ap-324 Version-
   Arubanetworks ≫ Ap-325 Version-
   Arubanetworks ≫ Ap-334 Version-
   Arubanetworks ≫ Ap-340 Version-
   Arubanetworks ≫ Ap-370 Version-
   Arubanetworks ≫ Ap-504 Version-
   Arubanetworks ≫ Ap-505 Version-
   Arubanetworks ≫ Ap-514 Version-
   Arubanetworks ≫ Ap-515 Version-
   Arubanetworks ≫ Ap-534 Version-
   Arubanetworks ≫ Ap-535 Version-
   Arubanetworks ≫ Ap-555 Version-
   Arubanetworks ≫ Ap-635 Version-
   Arubanetworks ≫ Ap-655 Version-
   Arubanetworks ≫ Iap-103 Version-
   Arubanetworks ≫ Iap-114 Version-
   Arubanetworks ≫ Iap-115 Version-
   Arubanetworks ≫ Iap-204 Version-
   Arubanetworks ≫ Iap-205 Version-
   Arubanetworks ≫ Iap-207 Version-
   Arubanetworks ≫ Iap-224 Version-
   Arubanetworks ≫ Iap-225 Version-
   Arubanetworks ≫ Iap-304 Version-
   Arubanetworks ≫ Iap-305 Version-
   Arubanetworks ≫ Iap-314 Version-
   Arubanetworks ≫ Iap-315 Version-
   Arubanetworks ≫ Iap-318 Version-
   Arubanetworks ≫ Iap-324 Version-
   Arubanetworks ≫ Iap-325 Version-
   Arubanetworks ≫ Iap-334 Version-
   Arubanetworks ≫ Rap-108 Version-
   Arubanetworks ≫ Rap-109 Version-
Arubanetworks ≫ Instant Version >= 8.7.0.0 < 8.7.1.10
   Arubanetworks ≫ Ap-103 Version-
   Arubanetworks ≫ Ap-114 Version-
   Arubanetworks ≫ Ap-115 Version-
   Arubanetworks ≫ Ap-120 Version-
   Arubanetworks ≫ Ap-121 Version-
   Arubanetworks ≫ Ap-130 Version-
   Arubanetworks ≫ Ap-135 Version-
   Arubanetworks ≫ Ap-204 Version-
   Arubanetworks ≫ Ap-205 Version-
   Arubanetworks ≫ Ap-207 Version-
   Arubanetworks ≫ Ap-214 Version-
   Arubanetworks ≫ Ap-215 Version-
   Arubanetworks ≫ Ap-224 Version-
   Arubanetworks ≫ Ap-225 Version-
   Arubanetworks ≫ Ap-303 Version-
   Arubanetworks ≫ Ap-304 Version-
   Arubanetworks ≫ Ap-305 Version-
   Arubanetworks ≫ Ap-314 Version-
   Arubanetworks ≫ Ap-315 Version-
   Arubanetworks ≫ Ap-318 Version-
   Arubanetworks ≫ Ap-324 Version-
   Arubanetworks ≫ Ap-325 Version-
   Arubanetworks ≫ Ap-334 Version-
   Arubanetworks ≫ Ap-340 Version-
   Arubanetworks ≫ Ap-370 Version-
   Arubanetworks ≫ Ap-504 Version-
   Arubanetworks ≫ Ap-505 Version-
   Arubanetworks ≫ Ap-514 Version-
   Arubanetworks ≫ Ap-515 Version-
   Arubanetworks ≫ Ap-534 Version-
   Arubanetworks ≫ Ap-535 Version-
   Arubanetworks ≫ Ap-555 Version-
   Arubanetworks ≫ Ap-635 Version-
   Arubanetworks ≫ Ap-655 Version-
   Arubanetworks ≫ Iap-103 Version-
   Arubanetworks ≫ Iap-114 Version-
   Arubanetworks ≫ Iap-115 Version-
   Arubanetworks ≫ Iap-204 Version-
   Arubanetworks ≫ Iap-205 Version-
   Arubanetworks ≫ Iap-207 Version-
   Arubanetworks ≫ Iap-224 Version-
   Arubanetworks ≫ Iap-225 Version-
   Arubanetworks ≫ Iap-304 Version-
   Arubanetworks ≫ Iap-305 Version-
   Arubanetworks ≫ Iap-314 Version-
   Arubanetworks ≫ Iap-315 Version-
   Arubanetworks ≫ Iap-318 Version-
   Arubanetworks ≫ Iap-324 Version-
   Arubanetworks ≫ Iap-325 Version-
   Arubanetworks ≫ Iap-334 Version-
   Arubanetworks ≫ Rap-108 Version-
   Arubanetworks ≫ Rap-109 Version-
Arubanetworks ≫ Instant Version >= 8.10.0.0 < 8.10.0.2
   Arubanetworks ≫ Ap-103 Version-
   Arubanetworks ≫ Ap-114 Version-
   Arubanetworks ≫ Ap-115 Version-
   Arubanetworks ≫ Ap-120 Version-
   Arubanetworks ≫ Ap-121 Version-
   Arubanetworks ≫ Ap-130 Version-
   Arubanetworks ≫ Ap-135 Version-
   Arubanetworks ≫ Ap-204 Version-
   Arubanetworks ≫ Ap-205 Version-
   Arubanetworks ≫ Ap-207 Version-
   Arubanetworks ≫ Ap-214 Version-
   Arubanetworks ≫ Ap-215 Version-
   Arubanetworks ≫ Ap-224 Version-
   Arubanetworks ≫ Ap-225 Version-
   Arubanetworks ≫ Ap-303 Version-
   Arubanetworks ≫ Ap-304 Version-
   Arubanetworks ≫ Ap-305 Version-
   Arubanetworks ≫ Ap-314 Version-
   Arubanetworks ≫ Ap-315 Version-
   Arubanetworks ≫ Ap-318 Version-
   Arubanetworks ≫ Ap-324 Version-
   Arubanetworks ≫ Ap-325 Version-
   Arubanetworks ≫ Ap-334 Version-
   Arubanetworks ≫ Ap-340 Version-
   Arubanetworks ≫ Ap-370 Version-
   Arubanetworks ≫ Ap-504 Version-
   Arubanetworks ≫ Ap-505 Version-
   Arubanetworks ≫ Ap-514 Version-
   Arubanetworks ≫ Ap-515 Version-
   Arubanetworks ≫ Ap-534 Version-
   Arubanetworks ≫ Ap-535 Version-
   Arubanetworks ≫ Ap-555 Version-
   Arubanetworks ≫ Ap-635 Version-
   Arubanetworks ≫ Ap-655 Version-
   Arubanetworks ≫ Iap-103 Version-
   Arubanetworks ≫ Iap-114 Version-
   Arubanetworks ≫ Iap-115 Version-
   Arubanetworks ≫ Iap-204 Version-
   Arubanetworks ≫ Iap-205 Version-
   Arubanetworks ≫ Iap-207 Version-
   Arubanetworks ≫ Iap-224 Version-
   Arubanetworks ≫ Iap-225 Version-
   Arubanetworks ≫ Iap-304 Version-
   Arubanetworks ≫ Iap-305 Version-
   Arubanetworks ≫ Iap-314 Version-
   Arubanetworks ≫ Iap-315 Version-
   Arubanetworks ≫ Iap-318 Version-
   Arubanetworks ≫ Iap-324 Version-
   Arubanetworks ≫ Iap-325 Version-
   Arubanetworks ≫ Iap-334 Version-
   Arubanetworks ≫ Rap-108 Version-
   Arubanetworks ≫ Rap-109 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.61% 0.812
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.