CVE-2025-37168 PUBLISHED CVSS 8.199999809265137 HIGH

Arbitrary file deletion vulnerability have been identified in a system function of mobility conductors running AOS-8 operating system. Successful exploitation of this vulnerability could allow an unauthenticated remote malicious actor to delete arbitrary files within the affected system and potentially result in denial-of-service conditions on affected devices.

EPSS 0.08% · 22.5th percentile

Risk Scores

CVSS v3.1
8.199999809265137
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
EPSS Score
0.08%
22.5th percentile

Affected Products

VendorProductVersions
arubanetworksarubaos6.5.4.0, 8.11.0.0, 10.3.0.0
Hewlett Packard Enterprise (HPE)ArubaOS (AOS)8.12.0.0, 8.10.0.0

Timeline

References

Open in Interactive Console →