Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploitation results in the execution of arbitrary commands on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9 and below; Aruba InstantOS 8.10.x: 8.10.0.1 and below; ArubaOS 10.3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InnstantOS that address these security vulnerabilities.
References
Link | Resource |
---|---|
https://cert-portal.siemens.com/productcert/pdf/ssa-506569.pdf | Third Party Advisory |
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-014.txt | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
AND |
|
History
09 Nov 2022, 03:59
Type | Values Removed | Values Added |
---|---|---|
References | (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-506569.pdf - Third Party Advisory | |
CPE | cpe:2.3:o:siemens:scalance_w1750d_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:siemens:scalance_w1750d:-:*:*:*:*:*:*:* |
|
First Time |
Siemens scalance W1750d
Siemens scalance W1750d Firmware Siemens |
08 Nov 2022, 14:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
11 Oct 2022, 17:30
Type | Values Removed | Values Added |
---|---|---|
First Time |
Arubanetworks arubaos
Arubanetworks Arubanetworks instant |
|
CWE | CWE-120 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
CPE | cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:* cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:* |
|
References | (MISC) https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-014.txt - Vendor Advisory |
07 Oct 2022, 18:24
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-10-07 18:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-37890
Mitre link : CVE-2022-37890
CVE.ORG link : CVE-2022-37890
JSON object : View
Products Affected
siemens
- scalance_w1750d_firmware
- scalance_w1750d
arubanetworks
- arubaos
- instant
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')