CVE-2022-37897: Improper Neutralization of Special Elements used in an OS Command

There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba Networks AP management protocol UDP port 8211. Successful exploitation of this vulnerability results in the ability to execute...

CVE-2022-37887

CVE-2022-37887 affects Aruba InstantOS/ArubaOS via buffer overflow vulnerabilities in multiple underlying services that can allow unauthenticated remote code execution by sending specially crafted packets to the PAPI UDP port 8211. Affected versions include InstantOS 6.4.x (6.4.4.8-4.2.4.20 and b...

CVE-2022-37888

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba Networks AP management protocol UDP port 8211. Successful exploitation of these vulnerabilities result...