VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Oct 7, 2022· Updated Jun 17, 2026

CVE-2022-37894

CVE-2022-37894

Description

An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected AP of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9 and below; Aruba InstantOS 8.10.x: 8.10.0.1 and below; ArubaOS 10.3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InstantOS that address this security vulnerability.

Affected products

6
  • Arubanetworks/Arubaos2 versions
    cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*range: >=10.3.0.0,<10.3.1.1
    • (no CPE)range: 10.3.1.0 and below
  • Arubanetworks/Instant
    cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*
    Range: >=6.4.0.0,<6.4.4.8-4.2.4.21
  • Siemens Foundation/Scalance W1750d Firmware
    cpe:2.3:o:siemens:scalance_w1750d_firmware:*:*:*:*:*:*:*:*
  • Aruba/InstantOS and ArubaOS 10description
  • Arubanetworks/InstantOSllm-create
    Range: 6.4.4.8-4.2.4.20 and below; 6.5.4.23 and below; 8.6.0.18 and below; 8.7.1.9 and below; 8.10.0.1 and below

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.