CVE-2022-37908

🗓️ 03 Nov 2022 19:29:32Reported by hpeType

An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers. Successful exploitation can compromise the hardware chain of trust on the impacted controller

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-37908	12 Dec 202216:20	–	circl
CNNVD	Aruba Networks ArubaOS 安全漏洞	26 Oct 202200:00	–	cnnvd
Cvelist	CVE-2022-37908	3 Nov 202219:29	–	cvelist
EUVD	EUVD-2022-40515	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in ArubaOS and SD-WAN	28 Oct 202200:00	–	ncsc
NVD	CVE-2022-37908	12 Dec 202213:15	–	nvd
OSV	CVE-2022-37908	12 Dec 202213:15	–	osv
Prion	Design/Logic Flaw	12 Dec 202213:15	–	prion
Positive Technologies	PT-2022-24142 · Aruba · Arubaos	3 Nov 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-37908	9 Jan 202609:13	–	redhatcve

NVD

Node

arubanetworks sd-wanRange8.7.0.0-2.3.0.0–8.7.0.0-2.3.0.6

arubanetworks arubaosRange6.5.4.0–6.5.4.22

arubanetworks arubaosRange8.4.0.0–8.6.0.17

arubanetworks arubaosRange8.7.0.0–8.7.1.9

arubanetworks arubaosRange8.8.0.0–10.3.0.1

AND

arubanetworks 7005Match-

arubanetworks 7008Match-

arubanetworks 7010Match-

arubanetworks 7024Match-

arubanetworks 7030Match-

arubanetworks 7205Match-

arubanetworks 7210Match-

arubanetworks 7220Match-

arubanetworks 7240xmMatch-

arubanetworks 7280Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central",
    "vendor": "Hewlett Packard Enterprise",
    "versions": [
      {
        "status": "unaffected",
        "version": "ArubaOS 6.5.4.x: 6.5.4.23 and above; ArubaOS 8.6.x: 8.6.0.18 and above; ArubaOS 8.7.x: 8.7.1.10 and above; ArubaOS 8.10.x: 8.10.0.0 and above; ArubaOS 10.3.x: 10.3.0.1 and above; SD-WAN-2.3.0.x: 8.7.0.0-2.3.0.7 and above"
      }
    ]
  }
]

Source	Link
arubanetworks	www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt

02 May 2025 19:15Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.15.8 - 6.5

EPSS0.00091

SSVC

CWE-494