UpHeron
All vulnerabilities

Servers and applications

CVE-2022-37894

An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected AP of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and…

Severity
Medium 6.5
Published
7 Oct 2022
Last changed
17 Jun 2026
Added to UpHeron
3 Nov 2026
Fixed in
10.3.1.1
Sources
NVD

Affected software

SoftwareAffected versions
HPE ArubaOSServers and applications · cpe:o:arubanetworks:arubaos
  • From 10.3.0.0 before 10.3.1.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-37894
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-37894