CVE-2025-37158: falha de média gravidade em Hewlett Packard Enterprise (HPE) HPE Aruba…
Authenticated Command Injection allows Unauthorized Command Execution in AOS-CX
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.7epss 0.6%
A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an authenticated remote attacker to conduct a Remote Code Execution (RCE) on the affected system.
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Produtos afetados
Hewlett Packard Enterprise (HPE) · HPE Aruba Networking AOS-CXCVEs relacionadas — Hewlett Packard Enterprise (HPE) HPE Aruba…
No mesmo produto, das mais perigosas para as menos.
CVE-2025-37156MEDIUMArubaOS-CX Platform-Level Denial-of-Service VulnerabilityEPSS 0.3%CVE-2025-37160MEDIUMAuthenticated Broken Access Control (BAC) in REST API Configuration ServiceEPSS 0.3%CVE-2025-37159MEDIUMAuthenticated Session Hijacking Allows Unauthorized Access in Network Switching SoftwareEPSS 0.3%CVE-2025-37155HIGHAuthenticated Privilege Escalation Allows Unauthorized Access in Network Management InterfaceEPSS 0.1%