Known vulnerabilities in Hewlett Packard Enterprise Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2022-37911 | Due to improper restrictions on XML entities multiple vulnerabilities exist in the command line interface of ArubaOS | 3.8 Low | Nov 3, 2022 |
| CVE-2022-37910 | A buffer overflow vulnerability exists in the ArubaOS command line interface | 4.4 Medium | Nov 3, 2022 |
| CVE-2022-37909 | Aruba has identified certain configurations of ArubaOS that can lead to sensitive information disclosure from the… | 5.3 Medium | Nov 3, 2022 |
| CVE-2022-37908 | An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers | 5.8 Medium | Nov 3, 2022 |
| CVE-2022-37907 | A vulnerability exists in the ArubaOS bootloader on 7xxx series controllers which can result in a denial of service… | 5.8 Medium | Nov 3, 2022 |
| CVE-2022-37906 | An authenticated path traversal vulnerability exists in the ArubaOS command line interface | 6.5 Medium | Nov 3, 2022 |
| CVE-2022-37905 | Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code… | 6.6 Medium | Nov 3, 2022 |
| CVE-2022-37904 | Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code… | 6.6 Medium | Nov 3, 2022 |
| CVE-2022-37903 | A vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled… | 7.2 High | Nov 3, 2022 |
| CVE-2022-37912 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface | 7.2 High | Nov 3, 2022 |
| CVE-2022-37902 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface | 7.2 High | Nov 3, 2022 |
| CVE-2022-37901 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface | 7.2 High | Nov 3, 2022 |
| CVE-2022-37900 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface | 7.2 High | Nov 3, 2022 |
| CVE-2022-37899 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface | 7.2 High | Nov 3, 2022 |
| CVE-2022-37898 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface | 7.2 High | Nov 3, 2022 |
| CVE-2022-37897 | There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially… | 9.8 Critical | Nov 3, 2022 |
Other Hewlett Packard Enterprise products
Intelligent Management Center (iMC) PLAT 95
Matrix Operating Environment 15
Aruba ClearPass Policy Manager 11
System Management Homepage for Windows and Linux 9
HPE 3PAR Service Processors 7
HPE OneView 7
HPE AutoPass License Server 7
HPE Intelligent Management Center (IMC) 6
Network Automation 6
HPE CentralView Fraud Risk Management 5
HP Network Node Manager (NNMi) 4
Aruba ClearPass 4