CVE-2022-37908

MEDIUM CVSS: 5.8 Published: 2022-12-12 Modified: 2026-06-17

Description

An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers. Successful exploitation can compromise the hardware chain of trust on the impacted controller.

Affected Platforms

Arubanetworks 7205Arubanetworks 7008Arubanetworks 7210Arubanetworks 7010Arubanetworks ArubaosArubanetworks Sd-WanArubanetworks 7030Arubanetworks 7240XmArubanetworks 7005Arubanetworks 7024

Weakness Type

NVD-CWE-noinfo, CWE-494

References