NetSight
high8.2

CVE-2025-37168

Arbitrary file deletion vulnerability have been identified in a system function of mobility conductors running AOS-8 operating system.

Impact

Arbitrary file deletion vulnerability have been identified in a system function of mobility conductors running AOS-8 operating system. Successful exploitation of this vulnerability could allow an unauthenticated remote malicious actor to delete arbitrary files within the affected system and potentially result in denial-of-service conditions on affected devices.

Affected products

VendorProductAffected versions
ArubanetworksArubaos
from 6.5.4.0 before 8.10.0.21
from 8.11.0.0 before 8.13.1.1
from 10.3.0.0 before 10.4.1.10
from 10.5.0.0 before 10.7.2.2

Weakness classification

References