CVE-2022-37904

EPSS 0.26%
Veröffentlicht 12.12.2022 13:15:12
Zuletzt bearbeitet 02.05.2025 19:15:51
Quelle security-alert@hpe.com
Teams Watchlist Login
Unerledigt Login

Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence. Successful exploitation could allow an attacker to achieve permanent modification of the underlying operating system.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Arubanetworks ≫ Sd-wan Version >= 8.7.0.0-2.3.0.0 < 8.7.0.0-2.3.0.6

   Arubanetworks ≫ 7005 Version-
   Arubanetworks ≫ 7008 Version-
   Arubanetworks ≫ 7010 Version-
   Arubanetworks ≫ 7024 Version-
   Arubanetworks ≫ 7030 Version-
   Arubanetworks ≫ 7205 Version-
   Arubanetworks ≫ 7210 Version-
   Arubanetworks ≫ 7220 Version-
   Arubanetworks ≫ 7240xm Version-
   Arubanetworks ≫ 7280 Version-

Arubanetworks ≫ Arubaos Version >= 6.5.4.0 < 6.5.4.22

Arubanetworks ≫ Arubaos Version >= 8.4.0.0 < 8.6.0.17

Arubanetworks ≫ Arubaos Version >= 8.7.0.0 < 8.7.1.9

Arubanetworks ≫ Arubaos Version >= 8.8.0.0 <= 8.9.03

Arubanetworks ≫ Arubaos Version10.3.0.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.26%	0.495

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
security-alert@hpe.com	6.6	0.7	5.9	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-123 Write-what-where Condition

Any condition where the attacker has the ability to write an arbitrary value to an arbitrary location, often as the result of a buffer overflow.

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-37904

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-37904

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-37904

EUVD