CVE-2025-37156: falha de média gravidade em Hewlett Packard Enterprise (HPE) HPE Aruba…
ArubaOS-CX Platform-Level Denial-of-Service Vulnerability
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.8epss 0.3%
A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software. Successful exploitation of this vulnerability could allow an attacker with administrative access to execute specific code that renders the switch non-bootable and effectively non-functional.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Produtos afetados
Hewlett Packard Enterprise (HPE) · HPE Aruba Networking AOS-CXCVEs relacionadas — Hewlett Packard Enterprise (HPE) HPE Aruba…
No mesmo produto, das mais perigosas para as menos.
CVE-2025-37158MEDIUMAuthenticated Command Injection allows Unauthorized Command Execution in AOS-CXEPSS 0.6%CVE-2025-37160MEDIUMAuthenticated Broken Access Control (BAC) in REST API Configuration ServiceEPSS 0.3%CVE-2025-37159MEDIUMAuthenticated Session Hijacking Allows Unauthorized Access in Network Switching SoftwareEPSS 0.3%CVE-2025-37155HIGHAuthenticated Privilege Escalation Allows Unauthorized Access in Network Management InterfaceEPSS 0.1%