VULNERABILITY INTELLIGENCE

CVE-2022-37906

CVSS score6.5 MEDIUM
EPSS probability0.92%
CISA KEVNot currently listed
Published2022-12-12
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Description

An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of the vulnerability results in the ability to delete arbitrary files on the underlying operating system.

Weakness classification

  • nvd@nist.gov: CWE-22
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-22

Primary references