CVE-2025-37164criticalunder attackCWE-94

CVE-2025-37164: critical vulnerability in Hewlett Packard Enterprise (HPE) HPE OneView

Published · Updated

Follow this CVE+ Monitor HPE OneView+ Monitor OneView

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 10epss 90%
from disclosure to weapon2 days
Published on NVDDec 16
1st PoC+2d
metasploitDec 16
CISA KEV+22d
Action required by CISAfederal deadline: 2026-01-28

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

HPE OneView has a critical flaw that allows attackers to run malicious code remotely on affected systems. This means an attacker can take complete control of the system without needing special access or credentials.

Technical detail

Remote code execution vulnerability in HPE OneView (CWE-94: Improper Control of Generation of Code) allows unauthenticated or low-privileged attackers to execute arbitrary code through network vectors. The vulnerability has a CVSS score of 10.0, indicating complete system compromise with no prerequisites.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

A remote code execution issue exists in HPE OneView.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Hewlett Packard Enterprise (HPE) · HPE OneView
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Hewlett Packard Enterprise (HPE) HPE OneView

In the same product, most dangerous first.

CVE-2023-30912HIGHCVE-2023-30912EPSS 1.6%CVE-2023-30909CRITICALCVE-2023-30909EPSS 1.5%CVE-2023-30908CRITICALCVE-2023-30908EPSS 1.4%CVE-2023-28091MEDIUMCVE-2023-28091EPSS 0.2%CVE-2023-28088HIGHCVE-2023-28088EPSS 0.2%CVE-2023-28090MEDIUMCVE-2023-28090EPSS 0.2%