01 Record
CVE-2022-37894
An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10. Successful exploitation of this vulnerability results in the
UnratedPUBLISHEDCNA: hpe
CNA base scoreUnratedNo CNA CVSS vector
02 Description
An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10. Successful exploitation of this vulnerability results in the
03 Exploitation and scoring
- Exploitation
- Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
- SSVC decision
- Not assessed by CISA
- EPSS probability
- 0.45% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 39.3% of scored records. A rank, not a probability.
- NVD base score
- 6.5 (CVSS v3.x), scored by the NVD independently of the CNA.
- NVD CVSS vector
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- NVD analysis status
- Modified. NVD last modified this record on 2026-06-17.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2022-10-07 00:00Z4 YR AGO
- Last updated
- 2024-08-03 10:37Z2 YR AGO
- Reserved
- 2022-08-08
- Assigning CNA
- hpe
- Record state
- PUBLISHED
- Severity
- Not rated by the issuing CNA
- CNA CVSS vector
- Not published by the issuing CNA
- Weaknesses
- No CWE assigned
- Data version
- 5.1
- Document digest
- cb91311568a4b0a4e203d952981caf42c6baf454aca74c29977d5f0cb4f7298b
05 Affected products
VendorProductVersionsPlatforms
n/aAruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below, Aruba InstantOS 6.5.x: 6.5.4.23 and below, Aruba InstantOS 8.6.x: 8.6.0.18 and below, Aruba InstantOS 8.7.x: 8.7.1.9 and below, Aruba InstantOS 8.10.x: 8.10.0.1 and below, ArubaOS 10.3.x: 10.3.1.0 and below—
06 References
- www.arubanetworks.comhttps://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-014.txt
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-506569.pdf