CVE-2022-37922
First published: Wed Nov 30 2022(Updated: )
Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.
Credit: security-alert@hpe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Arubanetworks Edgeconnect Enterprise | >=8.3.1.0<=8.3.7.1 | |
| Arubanetworks Edgeconnect Enterprise | >=9.0.0.0<=9.0.7.0 | |
| Arubanetworks Edgeconnect Enterprise | >=9.1.0.0<=9.1.3.0 | |
| Arubanetworks Edgeconnect Enterprise | >=9.2.0.0<=9.2.1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2022-37922?
CVE-2022-37922 is a vulnerability in the Aruba EdgeConnect Enterprise command line interface that allows remote authenticated users to run arbitrary commands on the underlying host.
How does CVE-2022-37922 impact Aruba EdgeConnect Enterprise?
CVE-2022-37922 allows attackers to execute arbitrary commands as root on the underlying operating system of Aruba EdgeConnect Enterprise, potentially leading to complete system takeover.
Which versions of Aruba EdgeConnect Enterprise are affected by CVE-2022-37922?
Versions 8.3.1.0 to 8.3.7.1, 9.0.0.0 to 9.0.7.0, 9.1.0.0 to 9.1.3.0, and 9.2.0.0 to 9.2.1.0 of Aruba EdgeConnect Enterprise are affected by CVE-2022-37922.
What is the severity of CVE-2022-37922?
The severity of CVE-2022-37922 is high, with a severity score of 7.2.
How can I fix CVE-2022-37922 in Aruba EdgeConnect Enterprise?
Aruba Networks has released a security advisory with remediation steps for CVE-2022-37922. Please refer to the official advisory for instructions on how to apply the necessary updates or patches.
- collector/nvd-index
- agent/severity
- agent/tags
- agent/description
- agent/author
- agent/event
- agent/references
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- vendor/arubanetworks
- canonical/arubanetworks edgeconnect enterprise
- version/arubanetworks edgeconnect enterprise/8.3.1.0
- version/arubanetworks edgeconnect enterprise/8.3.7.1
- version/arubanetworks edgeconnect enterprise/9.0.0.0
- version/arubanetworks edgeconnect enterprise/9.0.7.0
- version/arubanetworks edgeconnect enterprise/9.1.0.0
- version/arubanetworks edgeconnect enterprise/9.1.3.0
- version/arubanetworks edgeconnect enterprise/9.2.0.0
- version/arubanetworks edgeconnect enterprise/9.2.1.0