Orta CVSS 6.5
CVE-2022-37908: Sd-wan: güvenlik açığı
Açıklama (NVD)
An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers. Successful exploitation can compromise the hardware chain of trust on the impacted controller.
Özet bilgiler
- Ürün
- Arubanetworks Sd-wan
- CVSS v3.1
- 6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N - EPSS
- %0,28 (yüzdelik 20)
- CWE
- CWE-494
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| arubanetworks-sd-wan | 8.5.0.0-2.1.0.0 | — | 8.7.0.0-2.3.0.7 |
| arubanetworks-arubaos | 6.5.4.0 | — | 6.5.4.23 |
| arubanetworks-arubaos | 8.4.0.0 | — | 8.6.0.18 |
| arubanetworks-arubaos | 8.7.0.0 | — | 8.7.1.10 |
| arubanetworks-arubaos | 8.8.0.0 | — | 8.10.0.0 |
| arubanetworks-arubaos | 10.3.0.0 | 10.3.0.0 | — |