Arbitrary File Deletion in AOS-8 Mobility Conductors Causes DoS

Publication date: 2026-01-13

Last updated on: 2026-01-13

Assigner: Hewlett Packard Enterprise (HPE)

Description

Arbitrary file deletion vulnerability have been identified in a system function of mobility conductors running AOS-8 operating system. Successful exploitation of this vulnerability could allow an unauthenticated remote malicious actor to delete arbitrary files within the affected system and potentially result in denial-of-service conditions on affected devices.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-13

Last Modified

2026-01-13

Generated

2026-07-06

AI Q&A

2026-01-14

EPSS Evaluated

2026-07-05

NVD

CVE-2025-37168

EUVD

EUVD-2026-2067

Affected Vendors & Products

Vendor	Product	Version / Range
hpe	aos-8	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is an arbitrary file deletion flaw in a system function of mobility conductors running the AOS-8 operating system. It allows an unauthenticated remote attacker to delete arbitrary files on the affected system.

Impact Analysis

Exploitation of this vulnerability could lead to deletion of important files, potentially causing denial-of-service conditions on affected devices, disrupting normal operations.

Hi! I’m here to help you understand CVE-2025-37168. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70