UpHeron
All vulnerabilities

Servers and applications

CVE-2022-37893

An authenticated command injection vulnerability exists in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x:…

Severity
High 7.8
Published
7 Oct 2022
Last changed
17 Jun 2026
Added to UpHeron
3 Nov 2026
Fixed in
10.3.1.1
Sources
NVD

Affected software

SoftwareAffected versions
HPE ArubaOSServers and applications · cpe:o:arubanetworks:arubaos
  • From 10.3.0.0 before 10.3.1.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-37893
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-37893