CVE-2022-37902

{"id": "CVE-2022-37902", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}, {"type": "Secondary", "source": "security-alert@hpe.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "published": "2022-12-12T13:15:12.797", "references": [{"url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt", "tags": ["Vendor Advisory"], "source": "security-alert@hpe.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system. \n\n"}], "lastModified": "2023-11-07T03:49:54.550", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:arubanetworks:sd-wan:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0103D83D-C5A8-4F59-B5AF-B6F39A3F613F", "versionEndExcluding": "8.7.0.0-2.3.0.7", "versionStartIncluding": "8.7.0.0-2.3.0.0"}, {"criteria": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "174292ED-9C76-4815-8DBA-E83CB1A59E96", "versionEndExcluding": "6.5.4.23", "versionStartIncluding": "6.5.4.0"}, {"criteria": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "28D7A806-4AB8-49DD-91D0-E81E3B4FD468", "versionEndExcluding": "8.6.0.18", "versionStartIncluding": "8.4.0.0"}, {"criteria": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6E4F019-F048-4E6C-9EC7-B9B6A776C246", "versionEndExcluding": "8.7.1.10", "versionStartIncluding": "8.7.0.0"}, {"criteria": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0AAF010C-30AB-43D2-BAAB-813B869675FB", "versionEndIncluding": "8.9.0.3", "versionStartIncluding": "8.8.0.0"}, {"criteria": "cpe:2.3:o:arubanetworks:arubaos:10.3.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84A36EB0-A525-4B05-B9CE-A31145A7157C"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:arubanetworks:7005:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FE128072-9444-40D5-AC86-BB317869EB97"}, {"criteria": "cpe:2.3:h:arubanetworks:7008:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F747F71E-66BC-4776-BCCC-3123F8EEEBC6"}, {"criteria": "cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "59612211-5054-44DC-B028-61A2C5C6133D"}, {"criteria": "cpe:2.3:h:arubanetworks:7024:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "15FE873C-3C45-4EA3-9AD1-D07F132BC31F"}, {"criteria": "cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E8E68DB6-149B-4469-BD27-69F1AC59166F"}, {"criteria": "cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2E9AA178-1327-402E-8740-8409ECA448BC"}, {"criteria": "cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9969F899-4D7A-4DD5-B81D-DB16B20CF86A"}, {"criteria": "cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CF33BAD0-0596-4910-B096-99E2033F73D8"}, {"criteria": "cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FDDFDA5E-3895-463A-86EA-1823EC1B5045"}, {"criteria": "cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3BBA9A71-BE10-471A-A8BE-5CCB8CE8393F"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "security-alert@hpe.com"}