CVE Vulnerability

CVE-2022-37894

An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected AP of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9 and below; Aruba InstantOS 8.10.x: 8.10.0.1 and below; ArubaOS 10.3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InstantOS that address this security vulnerability.

6.5 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-014.txt Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-506569.pdf Third Party Advisory
Configurations

Configuration 1

cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
Information

Published : 2022-10-07 07:15

Updated : 2022-11-09 04:00

NVD link : CVE-2022-37894

Mitre link : CVE-2022-37894

Products Affected

Scalance W1750d Firmware

Siemens

CWE
NVD-CWE-noinfo