PT-2022-24137 · Hewlett Packard+1 · Aruba Mobility Conductor (Formerly Mobility Master); Aruba Mobility Controllers; Wlan Gateways/Sd-Wan Gateways Managed By Aruba Central+3

Published 2022-11-03 · Updated 2025-05-02 · CVE-2022-37903

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Software (affected versions not specified)

Description A vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled content via the web interface. Successful exploitation of this issue could lead to full compromise of the underlying host operating system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2022-37903

Affected Products

Aruba Mobility Conductor (Formerly Mobility Master); Aruba Mobility Controllers; Wlan Gateways/Sd-Wan Gateways Managed By Aruba Central

Aruba-Device

Arubaos

Sd-Wan

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-37903 · Security Note
• https://arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-37903 · Vendor Advisory
• https://t.me/cibsecurity/54293 · Telegram Post
• https://t.me/cvenotify/120633 · Telegram Post