Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-37897

There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

Published

2022-12-12T13:15:12.490

Last Modified

2025-05-02T19:15:51.130

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses
  • Type: Primary
    CWE-78
  • Type: Secondary
    CWE-78
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application arubanetworks sd-wan < 8.7.0.0-2.3.0.6 Yes
Operating System arubanetworks arubaos < 6.5.4.22 Yes
Operating System arubanetworks arubaos < 8.6.0.17 Yes
Operating System arubanetworks arubaos < 8.7.1.9 Yes
Operating System arubanetworks arubaos < 10.3.0.1 Yes
References