Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploitation results in the execution of arbitrary commands on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9 and below; Aruba InstantOS 8.10.x: 8.10.0.1 and below; ArubaOS 10.3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InnstantOS that address these security vulnerabilities.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-506569.pdf | Third Party Advisory |
| https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-014.txt | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
| AND |
|
History
09 Nov 2022, 03:59
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-506569.pdf - Third Party Advisory | |
| CPE | cpe:2.3:h:siemens:scalance_w1750d:-:*:*:*:*:*:*:* cpe:2.3:o:siemens:scalance_w1750d_firmware:-:*:*:*:*:*:*:* |
08 Nov 2022, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
11 Oct 2022, 17:30
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-10-07 18:15
Updated : 2024-02-04 22:51
NVD link : CVE-2022-37890
Mitre link : CVE-2022-37890
CVE.ORG link : CVE-2022-37890
JSON object : View
Products Affected
arubanetworks
- arubaos
- instant
siemens
- scalance_w1750d
- scalance_w1750d_firmware
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')