7.2
High
CVE-2022-37903 A vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled…
Description
A vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled content via the web interface. Successful exploitation of this vulnerability could lead to full compromise the underlying host operating system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | Versions not published |
Other CVEs of Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
The 16 CVEs of Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central →
CVE-2022-37911
Due to improper restrictions on XML entities multiple vulnerabilities exist in the command line interface of ArubaOS
3.8
Low
CVE-2022-37910
A buffer overflow vulnerability exists in the ArubaOS command line interface
4.4
Medium
CVE-2022-37909
Aruba has identified certain configurations of ArubaOS that can lead to sensitive information disclosure from the…
5.3
Medium
CVE-2022-37908
An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers
5.8
Medium