Vulnetix
Try Vulnetix Request Demo
CVE-2025-37176 PUBLISHED CVSS 6.5 MEDIUM

A command injection vulnerability in AOS-8 allows an authenticated privileged user to alter a package header to inject shell commands, potentially affecting the execution of internal operations. Successful exploit could allow an authenticated malicious actor to execute commands with the privileges of the impacted mechanism.

EPSS 0.07% · 21.1th percentile

Risk Scores

CVSS v3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
EPSS Score
0.07%
21.1th percentile

Affected Products

VendorProductVersions
arubanetworksarubaos8.6.0.0, 8.11.0.0
Hewlett Packard Enterprise (HPE)ArubaOS (AOS)8.12.0.0, 8.10.0.0

Timeline

References

Open in Interactive Console →