vulnerability

Aruba AOS-8: CVE-2022-37908: Authenticated Compromise of Bootloader Integrity

Severity
6
CVSS
(AV:N/AC:M/Au:M/C:N/I:C/A:N)
Published
Oct 25, 2022
Added
Jan 14, 2025
Modified
Jul 3, 2025

Description

An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers. Successful exploitation can compromise the hardware chain of trust on the impacted controller.

Solution

aruba-aos-8-cve-2022-37908
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.