Lucene search

K
nvd[email protected]NVD:CVE-2022-37917
HistoryDec 08, 2022 - 4:15 p.m.

CVE-2022-37917

2022-12-0816:15:11
web.nvd.nist.gov
7
vulnerabilities
airwave management platform
web-based
unauthorized access
privilege escalation
aruba airwave
version 8.2.15.0

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS

0.001

Percentile

43.2%

Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. These vulnerabilities could allow a remote attacker with limited privileges to gain access to sensitive information and/or change network configurations with privileges at a higher effective level in Aruba AirWave Management Platform version(s): 8.2.15.0 and below.

Affected configurations

Nvd
Node
arubanetworksairwaveRange8.2.15.0
VendorProductVersionCPE
arubanetworksairwave*cpe:2.3:a:arubanetworks:airwave:*:*:*:*:*:*:*:*

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS

0.001

Percentile

43.2%

Related for NVD:CVE-2022-37917