CVEvulnerability

CVE-2022-37908

6.5 MEDIUM Published 2022-12-12 Modified 2026-10-08 Official page ↗
Status
Analyzed
Published
2022-12-12
Last modified
2026-10-08
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.8 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-494

Description

An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers. Successful exploitation can compromise the hardware chain of trust on the impacted controller.

Affected configurations

• arubanetworks sd-wan (>= 8.5.0.0-2.1.0.0 < 8.7.0.0-2.3.0.7) • arubanetworks arubaos (>= 6.5.4.0 < 6.5.4.23) • arubanetworks arubaos (>= 8.4.0.0 < 8.6.0.18) • arubanetworks arubaos (>= 8.7.0.0 < 8.7.1.10) • arubanetworks arubaos (>= 8.8.0.0 < 8.10.0.0) • arubanetworks arubaos 10.3.0.0

Related

Weakness · CWE (1)

  • CWE-494 Download of Code Without Integrity Check weakness

References