CVE-2022-37912

HighCVSS 8.8/10Last modified Oct 8, 2026

Description

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Dec 12, 2022
Last modified
Oct 8, 2026
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-379139.8Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attCVE-2022-379149.8Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attCVE-2022-379159.8A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attCVE-2022-379168.1Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access coCVE-2022-379178.1Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access coCVE-2022-379188.1Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access coCVE-2022-379197.5A vulnerability exists in the API of Aruba EdgeConnect Enterprise. An unauthenticated attacker can exploit this condition via the web-based CVE-2022-37929.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GullsEye GullsEye terminal operating sCVE-2022-379207.2Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on theCVE-2022-379217.2Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on theCVE-2022-379227.2Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on theCVE-2022-379237.2Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the
CVE-2022-37912: High severity, CVSS 8.8 | Vulnix