CVE-2022-37907

HighCVSS 7.5/10Last modified Oct 8, 2026

Description

A vulnerability exists in the ArubaOS bootloader on 7xxx series controllers which can result in a denial of service (DoS) condition on an impacted system. A successful attacker can cause a system hang which can only be resolved via a power cycle of the impacted controller.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

No affected versions have been published.

Timeline

Published: Dec 12, 2022
Last modified: Oct 8, 2026
NVD status: Analyzed

Related CVEs from 2022

CVE-2022-379086.5An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers. Successful exploitation can comprom CVE-2022-379095.3Aruba has identified certain configurations of ArubaOS that can lead to sensitive information disclosure from the configured ESSIDs. The sce CVE-2022-379106.5A buffer overflow vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability results in a den CVE-2022-379115.5Due to improper restrictions on XML entities multiple vulnerabilities exist in the command line interface of ArubaOS. A successful exploit c CVE-2022-379128.8Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilitie CVE-2022-379139.8Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote att CVE-2022-379149.8Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote att CVE-2022-379159.8A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote att CVE-2022-379168.1Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access co CVE-2022-379178.1Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access co CVE-2022-379188.1Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access co CVE-2022-379197.5A vulnerability exists in the API of Aruba EdgeConnect Enterprise. An unauthenticated attacker can exploit this condition via the web-based