CVE-2022-37922: High severity arubanetworks edgeconnect enterprise vulnerability
Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-37922?
CVE-2022-37922 is a vulnerability in the Aruba EdgeConnect Enterprise command line interface that allows remote authenticated users to run arbitrary commands on the underlying host.
How does CVE-2022-37922 impact Aruba EdgeConnect Enterprise?
CVE-2022-37922 allows attackers to execute arbitrary commands as root on the underlying operating system of Aruba EdgeConnect Enterprise, potentially leading to complete system takeover.
Which versions of Aruba EdgeConnect Enterprise are affected by CVE-2022-37922?
Versions 8.3.1.0 to 8.3.7.1, 9.0.0.0 to 9.0.7.0, 9.1.0.0 to 9.1.3.0, and 9.2.0.0 to 9.2.1.0 of Aruba EdgeConnect Enterprise are affected by CVE-2022-37922.
What is the severity of CVE-2022-37922?
The severity of CVE-2022-37922 is high, with a severity score of 7.2.
How can I fix CVE-2022-37922 in Aruba EdgeConnect Enterprise?
Aruba Networks has released a security advisory with remediation steps for CVE-2022-37922. Please refer to the official advisory for instructions on how to apply the necessary updates or patches.