CVE-2022-37906 — Path Traversal in Arubaos

CWE-22 — Path Traversal3 documents3 sources
Severity
8.1HIGHNVD
CNA6.5
EPSS
0.5%
top 35.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Arubanetworks ArubaosArubanetworks Sd-wan
Timeline
PublishedDec 12

Description

An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of the vulnerability results in the ability to delete arbitrary files on the underlying operating system.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:HExploitability: 2.8 | Impact: 5.2

Affected Packages2 packages

▶NVDarubanetworks/arubaos6.5.4.0 — 6.5.4.22+3
▶NVDarubanetworks/sd-wan8.7.0.0-2.3.0.0 — 8.7.0.0-2.3.0.6

🔴Vulnerability Details

2
GHSA
GHSA-wcq6-r5g5-crr8: An authenticated path traversal vulnerability exists in the ArubaOS command line interface↗2022-12-12
▶
CVEList
CVE-2022-37906: An authenticated path traversal vulnerability exists in the ArubaOS command line interface↗2022-11-03
▶
CVE-2022-37906 — Path Traversal in Arubaos | cvebase