medium5.8
CVE-2022-37908
An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers.
Impact
An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers. Successful exploitation can compromise the hardware chain of trust on the impacted controller.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Arubanetworks | Sd-Wan | from 8.5.0.0-2.1.0.0 before 8.7.0.0-2.3.0.7 |
| Arubanetworks | Arubaos | from 6.5.4.0 before 6.5.4.23 from 8.4.0.0 before 8.6.0.18 from 8.7.0.0 before 8.7.1.10 from 8.8.0.0 before 8.10.0.0 Version 10.3.0.0 |