CVE-2025-37142
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-10-14
Last updated on: 2025-11-12
Assigner: Hewlett Packard Enterprise (HPE)
Description
Description
Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| arubanetworks | arubaos | From 8.10.0.0 (inc) to 8.10.0.19 (exc) |
| arubanetworks | arubaos | From 8.12.0.0 (inc) to 8.12.0.6 (exc) |
| arubanetworks | arubaos | From 8.13.0.0 (inc) to 8.13.1.0 (exc) |
| arubanetworks | arubaos | From 10.4.0.0 (inc) to 10.4.1.9 (exc) |
| arubanetworks | arubaos | From 10.7.0.0 (inc) to 10.7.2.1 (exc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-284 | The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. |
