Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-37820 State: PUBLISHED Published: 2022-08-25T14:07:15 Last Updated: 2024-08-03T10:37:41.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the ddnsEn parameter in the function formSetSysToolDDNS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AX1803/8
CVE ID: CVE-2022-37821 State: PUBLISHED Published: 2022-08-25T14:06:12 Last Updated: 2024-08-03T10:37:41.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the ProvinceCode parameter in the function formSetProvince. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AX1803/6
CVE ID: CVE-2022-37822 State: PUBLISHED Published: 2022-08-25T14:07:22 Last Updated: 2024-08-03T10:37:41.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the function fromSetRouteStatic. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AX1803/3
CVE ID: CVE-2022-37823 State: PUBLISHED Published: 2022-08-25T14:06:14 Last Updated: 2024-08-03T10:37:42.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function formSetVirtualSer. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AX1803/1
CVE ID: CVE-2022-37824 State: PUBLISHED Published: 2022-08-25T14:07:06 Last Updated: 2024-08-03T10:37:41.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWifiGusetBasic. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AX1803/5
CVE ID: CVE-2022-37830 State: PUBLISHED Published: 2023-10-19T00:00:00 Last Updated: 2024-09-13T14:50:52.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Interway a.s WebJET CMS 8.6.896 is vulnerable to Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://webjet.com - https://citadelo.com/download/CVE-2022-37830.pdf
CVE ID: CVE-2022-37832 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-18T13:23:01.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mutiny 7.2.0-10788 suffers from Hardcoded root password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://labs.jumpsec.com/advisory-cve-2022-37832-mutiny-network-monitoring-appliance-hardcoded-credentials/
CVE ID: CVE-2022-37835 State: PUBLISHED Published: 2022-09-12T11:11:32 Last Updated: 2024-08-03T10:37:41.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Torguard VPN 4.8, has a vulnerability that allows an attacker to dump sensitive information, such as credentials and information about the server, without admin privileges. Additional Analyst Notes: - CVE Program Container: References: - https://torguard.net/ - https://almorabea.net/cves/torguard.html
CVE ID: CVE-2022-37839 State: PUBLISHED Published: 2022-09-06T16:37:10 Last Updated: 2024-08-03T10:37:42.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A860R V4.1.2cu.5182_B20201027 is vulnerable to Buffer Overflow via Cstecgi.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/1759134370/iot/blob/main/TOTOLINK/A860R/5.md
CVE ID: CVE-2022-37840 State: PUBLISHED Published: 2022-09-06T16:40:44 Last Updated: 2024-08-03T10:37:41.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TOTOLINK A860R V4.1.2cu.5182_B20201027, the main function in downloadfile.cgi has a buffer overflow vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/1759134370/iot/blob/main/TOTOLINK/A860R/3.md
CVE ID: CVE-2022-37841 State: PUBLISHED Published: 2022-09-06T16:39:42 Last Updated: 2024-08-03T10:37:41.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TOTOLINK A860R V4.1.2cu.5182_B20201027 there is a hard coded password for root in /etc/shadow.sample. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/1759134370/iot/blob/main/TOTOLINK/A860R/2.md
CVE ID: CVE-2022-37842 State: PUBLISHED Published: 2022-09-06T16:43:02 Last Updated: 2024-08-03T10:37:42.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TOTOLINK A860R V4.1.2cu.5182_B20201027, the parameters in infostat.cgi are not filtered, causing a buffer overflow vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/1759134370/iot/blob/main/TOTOLINK/A860R/1.md
CVE ID: CVE-2022-37843 State: PUBLISHED Published: 2022-09-06T16:34:56 Last Updated: 2024-08-03T10:37:42.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TOTOLINK A860R V4.1.2cu.5182_B20201027 in cstecgi.cgi, the acquired parameters are directly put into the system for execution without filtering, resulting in a command injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/1759134370/iot/blob/main/TOTOLINK/A860R/4.md
CVE ID: CVE-2022-37857 State: PUBLISHED Published: 2022-09-08T15:17:18 Last Updated: 2024-08-03T10:37:41.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: bilde2910 Hauk v1.6.1 requires a hardcoded password which by default is blank. This hardcoded password is hashed but stored within the config.php file server-side as well as in clear-text on the android client device by default. Additional Analyst Notes: - CVE Program Container: References: - https://gainsec.com/2022/08/07/cve-2022-hardcoded-creds-weak-password-hauk-android-location-sharing/ - https://github.com/bilde2910/Hauk/issues/187
CVE ID: CVE-2022-37860 State: PUBLISHED Published: 2022-09-12T17:06:10 Last Updated: 2024-08-03T10:37:41.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web configuration interface of the TP-Link M7350 V3 with firmware version 190531 is affected by a pre-authentication command injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.tp-link.com/uk/support/download/m7350/v3/#Firmware - https://www.yuque.com/docs/share/fca60ef9-e5a4-462a-a984-61def4c9b132
CVE ID: CVE-2022-37861 State: PUBLISHED Published: 2022-09-15T15:48:31 Last Updated: 2024-08-03T10:37:41.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a remote code execution (RCE) vulnerability in Tenhot TWS-100 V4.0-201809201424 router device. It is necessary to know that the device account password is allowed to escape the execution system command through the network tools in the network diagnostic component. Additional Analyst Notes: - CVE Program Container: References: - http://www.tenhot.net/html/pro/wgzly/111704.html - https://gist.github.com/ox01024/784894c27213c5a765b5c8f8375db256
CVE ID: CVE-2022-37864 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2024-08-03T10:37:42.243Z Vendors: Siemens Products: Solid Edge Problem Types: CWE-122 Description: A vulnerability has been identified in Solid Edge (All Versions < SE2022MP9). The affected application contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted DWG files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-17627) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-258115.pdf
CVE ID: CVE-2022-37865 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-02T18:35:06.895Z Vendors: Apache Software Foundation Products: Apache Ivy Problem Types: allow create/overwrite any file on the syste Description: With Apache Ivy 2.4.0 an optional packaging attribute has been introduced that allows artifacts to be unpacked on the fly if they used pack200 or zip packaging. For artifacts using the "zip", "jar" or "war" packaging Ivy prior to 2.5.1 doesn't verify the target path when extracting the archive. An archive containing absolute paths or paths that try to traverse "upwards" using ".." sequences can then write files to any location on the local fie system
paths that try to traverse "upwards" using ".." sequences can then write files to any location on the local fie system that the user executing Ivy has write access to. Ivy users of version 2.4.0 to 2.5.0 should upgrade to Ivy 2.5.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/gqvvv7qsm2dfjg6xzsw1s2h08tbr0sdy - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YDIFDL5WSBEKBUVKTABUFDDD25SBNJLS/
CVE ID: CVE-2022-37866 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-01T20:46:04.704Z Vendors: Apache Software Foundation Products: Apache Ivy Problem Types: CWE-22 Description: When Apache Ivy downloads artifacts from a repository it stores them in the local file system based on a user-supplied "pattern" that may include placeholders for artifacts coordinates like the organisation, module or version. If said coordinates contain "../" sequences - which are valid characters for Ivy coordinates in general - it is possible the artifacts are stored outside of Ivy's local cache or repository or can overwrite different artifacts inside of the local cache. In order to e
outside of Ivy's local cache or repository or can overwrite different artifacts inside of the local cache. In order to exploit this vulnerability an attacker needs collaboration by the remote repository as Ivy will issue http requests containing ".." sequences and a "normal" repository will not interpret them as part of the artifact coordinates. Users of Apache Ivy 2.0.0 to 2.5.1 should upgrade to Ivy 2.5.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/htxbr8oc464hxrgroftnz3my70whk93b - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YDIFDL5WSBEKBUVKTABUFDDD25SBNJLS/
CVE ID: CVE-2022-37877 State: PUBLISHED Published: 2022-09-20T20:00:52.000Z Last Updated: 2025-05-27T18:14:20.168Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: Local Privilege Escalation Description: A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root level privileges on the macOS instance in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and below; 6.9.x: 6.9.11 and below. Aruba has released upgrades for Aruba ClearPass Policy Manager that address this security vulnerability. Additional Analyst
a has released upgrades for Aruba ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-013.txt
CVE ID: CVE-2022-37878 State: PUBLISHED Published: 2022-09-20T19:58:14.000Z Last Updated: 2025-05-28T15:55:01.508Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: Authenticated Remote Command Injection Description: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and below; 6.9.x: 6.9.11 and below. Aruba has released upgrades for Aruba ClearPass P
Manager version(s): 6.10.x: 6.10.6 and below; 6.9.x: 6.9.11 and below. Aruba has released upgrades for Aruba ClearPass Policy Manager that address these security vulnerabilities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-013.txt
CVE ID: CVE-2022-37879 State: PUBLISHED Published: 2022-09-20T19:57:07.000Z Last Updated: 2025-05-28T15:55:44.804Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: Authenticated Remote Command Injection Description: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and below; 6.9.x: 6.9.11 and below. Aruba has released upgrades for Aruba ClearPass P
CVE ID: CVE-2022-37880 State: PUBLISHED Published: 2022-09-20T19:59:26.000Z Last Updated: 2025-05-28T15:54:07.301Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: Authenticated Remote Command Injection Description: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and below; 6.9.x: 6.9.11 and below. Aruba has released upgrades for Aruba ClearPass P
CVE ID: CVE-2022-37881 State: PUBLISHED Published: 2022-09-20T19:54:08.000Z Last Updated: 2025-05-28T15:57:31.686Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: Authenticated Remote Command Injection Description: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and below; 6.9.x: 6.9.11 and below. Aruba has released upgrades for Aruba ClearPass P
CVE ID: CVE-2022-37882 State: PUBLISHED Published: 2022-09-20T19:53:00.000Z Last Updated: 2025-05-28T15:58:10.904Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: Authenticated Remote Command Injection Description: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and below; 6.9.x: 6.9.11 and below. Aruba has released upgrades for Aruba ClearPass P
CVE ID: CVE-2022-37883 State: PUBLISHED Published: 2022-09-20T19:51:50.000Z Last Updated: 2025-05-29T13:23:16.157Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: Authenticated Remote Command Injection Description: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and below; 6.9.x: 6.9.11 and below. Aruba has released upgrades for Aruba ClearPass P
CVE ID: CVE-2022-37884 State: PUBLISHED Published: 2022-09-20T19:55:36.000Z Last Updated: 2025-05-28T15:56:35.192Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: Unauthenticated Denial-of-Service Description: A vulnerability exists in the ClearPass Policy Manager Guest User Interface that can allow an unauthenticated attacker to send specific operations which result in a Denial-of-Service condition. A successful exploitation of this vulnerability results in the unavailability of the guest interface in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and below; 6.9.x: 6.9.11 and below. Aruba has released upgrades for Aruba ClearPass Policy Manager that address t
6.10.6 and below; 6.9.x: 6.9.11 and below. Aruba has released upgrades for Aruba ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-013.txt
CVE ID: CVE-2022-37885 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T10:37:42.570Z Vendors: n/a Products: Aruba Access Points; 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; Problem Types: Buffer Overflow Vulnerability Description: There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined
erlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a privileged user on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9 and below; Aruba InstantOS 8.10.x: 8.10.0.1 and below; ArubaOS 10.3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InnstantOS that address these security vulnerabilities. A
3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InnstantOS that address these security vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-014.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-506569.pdf
CVE ID: CVE-2022-37886 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T10:37:42.038Z Vendors: n/a Products: Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; Problem Types: Buffer Overflow Vulnerability Description: There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined
CVE ID: CVE-2022-37887 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T10:37:41.894Z Vendors: n/a Products: Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; Problem Types: Buffer Overflow Vulnerability Description: There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined
CVE ID: CVE-2022-37888 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-08-03T10:37:42.050Z Vendors: n/a Products: Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; Problem Types: Buffer Overflow Vulnerability Description: There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined
CVE ID: CVE-2022-37889 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T10:37:41.984Z Vendors: n/a Products: Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; Problem Types: Buffer Overflow Vulnerability Description: There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined
CVE ID: CVE-2022-37890 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T10:37:42.102Z Vendors: n/a Products: Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; Problem Types: Unauthenticated Buffer Overflow Description: Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploitation results in the execution of a
ithin the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploitation results in the execution of arbitrary commands on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9 and below; Aruba InstantOS 8.10.x: 8.10.0.1 and below; ArubaOS 10.3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InnstantOS that address these security vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-014.txt - https://cert-portal.siemens.com/produc
References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-014.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-506569.pdf
CVE ID: CVE-2022-37891 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T10:37:41.911Z Vendors: n/a Products: Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; Problem Types: Unauthenticated Buffer Overflow Description: Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploitation results in the execution of a