{"id":"CVE-2022-37895","url":"https://www.cyber-defence.io/tools/cve/CVE-2022-37895","generatedAt":"2026-10-27T17:39:12.457Z","title":"An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10.","description":"An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected AP of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9 and below; Aruba InstantOS 8.10.x: 8.10.0.1 and below; ArubaOS 10.3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InstantOS that address this security vulnerability.","published":"2022-10-07T19:15:13.000Z","lastModified":"2026-06-17T04:55:39.000Z","status":"Modified","sourceIdentifier":"security-alert@hpe.com","cvss":{"version":"3.1","score":4.9,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"},"cwe":[],"affected":["arubanetworks/arubaos","arubanetworks/instant","siemens/scalance w1750d firmware"],"epss":{"score":0.00858,"percentile":0.58187,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.86%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-506569.pdf","tags":["Third Party Advisory"],"source":"security-alert@hpe.com"},{"url":"https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-014.txt","tags":["Vendor Advisory"],"source":"security-alert@hpe.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-506569.pdf","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-014.txt","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2022-37895","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}