CVE-2022-37907

MEDIUM

ArubaOS 6.5.4.0-6.5.4.21 and SD-WAN 8.7.0.0-2.3.0.0-8.7.0.0-2.3.0.5 - Denial of Service via Bootloader

Title source: llm
STIX 2.1

Description

A vulnerability exists in the ArubaOS bootloader on 7xxx series controllers which can result in a denial of service (DoS) condition on an impacted system. A successful attacker can cause a system hang which can only be resolved via a power cycle of the impacted controller.

References (1)

Core 1

Scores

CVSS v3 5.8
EPSS 0.0025
EPSS Percentile 48.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-400
Status published
Products (2)
arubanetworks/arubaos 6.5.4.0 - 6.5.4.22
arubanetworks/sd-wan 8.7.0.0-2.3.0.0 - 8.7.0.0-2.3.0.6
Published Dec 12, 2022
Tracked Since Feb 18, 2026