UpHeron
All vulnerabilities

Servers and applications

CVE-2022-37890

Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploitation results in the execution of arbitrary commands on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9…

Severity
Critical 9.8
Published
7 Oct 2022
Last changed
17 Jun 2026
Added to UpHeron
3 Nov 2026
Fixed in
10.3.1.1
Sources
NVD

Affected software

SoftwareAffected versions
HPE ArubaOSServers and applications · cpe:o:arubanetworks:arubaos
  • From 10.3.0.0 before 10.3.1.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-37890
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-37890