medium6.7
CVE-2025-37158
A command injection vulnerability exists in the AOS-CX Operating System.
Impact
A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an authenticated remote attacker to conduct a Remote Code Execution (RCE) on the affected system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hpe | Arubaos-Cx | from 10.10.0000 before 10.10.1170 from 10.13.0000 before 10.13.1101 from 10.14.0000 before 10.14.1060 from 10.15.0000 before 10.15.1030 from 10.16.0000 before 10.16.1001 |