CVE-2022-37913 Auth bypass in Aruba EdgeConnect Enterprise Orchestrator (on-premises), Aruba EdgeConnect Enterprise Orchestrator-as-a-Service, Aruba EdgeConnect Enterprise Orchestrator-SP and Aruba EdgeConnect Enterprise Orchestrator Global Enterprise Tenant Orchestrators

Critical 9.8 Published 28 Oct 2022 Updated 7 May 2025

Unauthenticated remote attackers can bypass authentication to gain administrative privileges and completely compromise the Aruba EdgeConnect Enterprise Orchestrator.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2022-37913?

CVE-2022-37913 is a critical authentication bypass vulnerability in Aruba EdgeConnect Enterprise Orchestrator (on-premises), Aruba EdgeConnect Enterprise Orchestrator-as-a-Service, Aruba EdgeConnect Enterprise Orchestrator-SP and Aruba EdgeConnect Enterprise Orchestrator Global Enterprise Tenant Orchestrators, published on 28 Oct 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to bypass authentication. Successful exploitation of these vulnerabilities could allow an attacker to gain administrative privileges leading to a complete compromise of the Aruba EdgeConnect Enterprise Orchestrator with versions 9.1.2.40051 and below, 9.0.7.40108 and below, 8.10.23.40009 and below, and any older branches of Orchestrator not specifically mentioned.

Weakness: CWE-287

Which versions are affected by CVE-2022-37913?

It affects 1 product.

Products include Arubanetworks Aruba Edgeconnect Enterprise Orchestrator.

How do I fix CVE-2022-37913?

No fix has been published for CVE-2022-37913 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2022-37913 being exploited?

There is no known exploitation of CVE-2022-37913 in the wild and no public exploit code.

Sources

Also known as GHSA-548r-qhxq-rvvv.