CVE-2022-37901: OS Command Injection
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this ArubaOS command injection vulnerability?
The vulnerability ID for this ArubaOS command injection vulnerability is CVE-2022-37901.
What is the severity of CVE-2022-37901?
The severity of CVE-2022-37901 is high, with a severity value of 7.2.
Which software is affected by CVE-2022-37901?
The ArubaOS software versions 6.5.4.0 to 6.5.4.23, 8.4.0.0 to 8.6.0.18, 8.7.0.0 to 8.7.1.10, 8.8.0.0 to 8.9.0.3, and 10.3.0.0 are affected by CVE-2022-37901.
How can an attacker exploit CVE-2022-37901?
An attacker can exploit CVE-2022-37901 by authenticating to the ArubaOS command line interface and executing arbitrary commands as a privileged user.
Is CVE-2022-37901 related to Aruba Networks SD-WAN?
No, CVE-2022-37901 is not related to Aruba Networks SD-WAN.