CVE-2022-37919

🗓️ 30 Nov 2022 19:05:20Reported by hpeType

A denial-of-service vulnerability in Aruba EdgeConnect Enterprise allows unauthenticated attacker to disrupt API requests in versions ECOS 9.2.1.0 and below

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2022-37919	12 Dec 202216:20	–	circl
CNNVD	Aruba Networks EdgeConnect 安全漏洞	12 Dec 202200:00	–	cnnvd
Cvelist	CVE-2022-37919	30 Nov 202219:05	–	cvelist
EUVD	EUVD-2022-40526	3 Oct 202520:07	–	euvd
NVD	CVE-2022-37919	12 Dec 202213:15	–	nvd
Prion	Design/Logic Flaw	12 Dec 202213:15	–	prion
Positive Technologies	PT-2022-24151 · Aruba · Aruba Edgeconnect Enterprise	30 Nov 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-37919	9 Jan 202608:43	–	redhatcve
Vulnrichment	CVE-2022-37919	30 Nov 202219:05	–	vulnrichment

NVD

Node

arubanetworks edgeconnect_enterpriseRange8.3.1.0–8.3.7.1

arubanetworks edgeconnect_enterpriseRange9.0.0.0–9.0.7.0

arubanetworks edgeconnect_enterpriseRange9.1.0.0–9.1.3.0

arubanetworks edgeconnect_enterpriseRange9.2.0.0–9.2.1.0

[
  {
    "defaultStatus": "unaffected",
    "product": "Aruba EdgeConnect Enterprise Software",
    "vendor": "Hewlett Packard Enterprise (HPE)",
    "versions": [
      {
        "status": "affected",
        "version": "ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below;"
      }
    ]
  }
]

Source	Link
arubanetworks	www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-018.txt

21 Nov 2024 07:15Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

EPSS0.01642

SSVC