1. Home
  2. CVE Database
  3. CVE-2022-37908
MEDIUM · 5.8

CVE-2022-37908

An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers. Successful exploitation can compromise the hardware chain of trust on the impacted controller. ...

Vulnerability Description

An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers. Successful exploitation can compromise the hardware chain of trust on the impacted controller.

CVSS Score

5.8

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
ArubanetworksSd-Wan>= 8.7.0.0-2.3.0.0, < 8.7.0.0-2.3.0.6
ArubanetworksArubaos>= 6.5.4.0, < 6.5.4.22
Arubanetworks7005-
Arubanetworks7008-
Arubanetworks7010-
Arubanetworks7024-
Arubanetworks7030-
Arubanetworks7205-
Arubanetworks7210-
Arubanetworks7220-
Arubanetworks7240Xm-
Arubanetworks7280-

Related Weaknesses (CWE)

CWE-494

References

FAQ

What is CVE-2022-37908?

CVE-2022-37908 is a vulnerability with a CVSS score of 5.8 (MEDIUM). An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers. Successful exploitation can compromise the hardware chain of trust on the impacted controller. ...

How severe is CVE-2022-37908?

CVE-2022-37908 has been rated MEDIUM with a CVSS base score of 5.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-37908?

Check the references section above for vendor advisories and patch information. Affected products include: Arubanetworks Sd-Wan, Arubanetworks Arubaos, Arubanetworks 7005, Arubanetworks 7008, Arubanetworks 7010.