CVE-2022-37906

An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of the vulnerability results in the ability to delete arbitrary files on the underlying operating system.

CVSS 3.1

8.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS

0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-25)

CWE

CWE-22

Published

2022-12-12

Modified

2026-10-08

Record from

the NVD, synced 2026-10-19

Affected

• arubanetworks:arubaos
• arubanetworks:sd-wan

References

• https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt
• https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-016.txt

Check your stackJSON