CVE-2025-37175

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Arbitrary file upload vulnerability exists in the web-based management interface of mobility conductors running either AOS-10 or AOS-8 operating systems. Successful exploitation could allow an authenticated malicious actor to upload arbitrary files as a privilege user and execute arbitrary commands on the underlying operating system.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

VendorProductVersions
Hewlett Packard Enterprise (HPE)ArubaOS (AOS)>= 10.6.0.0, <= 10.7.2.1; >= 10.3.0.0, <= 10.4.1.9; >= 8.12.0.0, <= 8.13.1.0; >= 8.10.0.0, <= 8.10.0.20

References

Timeline

Published
Jan 13, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-371767.2A command injection vulnerability in AOS-8 allows an authenticated privileged user to alter a package header to inject shell commands, potenCVE-2025-371776.5An arbitrary file deletion vulnerability has been identified in the command-line interface of mobility conductors running either AOS-10 or ACVE-2025-371787.5Multiple out-of-bounds read vulnerabilities were identified in a system component responsible for handling certain data buffers. Due to insuCVE-2025-371795.3Multiple out-of-bounds read vulnerabilities were identified in a system component responsible for handling certain data buffers. Due to insuCVE-2025-37185.4A client-side path traversal vulnerability was discovered in the web management interface front-end due to missing validation of an input paCVE-2025-371817.2Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to perCVE-2025-371827.2Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to perCVE-2025-371837.2Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to perCVE-2025-371849.8A vulnerability exists in an Orchestrator service that could allow an unauthenticated remote attacker to bypass multi-factor authentication CVE-2025-371854.8Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conCVE-2025-371867.8A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking Virtual Intranet Access (VIA) client. Successful CVE-2025-37198.1An access control vulnerability was discovered in the CLI functionality due to a specific access restriction not being properly enforced for