CVE-2025-37177

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An arbitrary file deletion vulnerability has been identified in the command-line interface of mobility conductors running either AOS-10 or AOS-8 operating systems. Successful exploitation of this vulnerability could allow an authenticated remote malicious actor to delete arbitrary files within the affected system.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-552

Affected software

No affected versions have been published.

Timeline

Published: Jan 13, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-371787.5Multiple out-of-bounds read vulnerabilities were identified in a system component responsible for handling certain data buffers. Due to insu CVE-2025-371795.3Multiple out-of-bounds read vulnerabilities were identified in a system component responsible for handling certain data buffers. Due to insu CVE-2025-37185.4A client-side path traversal vulnerability was discovered in the web management interface front-end due to missing validation of an input pa CVE-2025-371817.2Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to per CVE-2025-371827.2Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to per CVE-2025-371837.2Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to per CVE-2025-371849.8A vulnerability exists in an Orchestrator service that could allow an unauthenticated remote attacker to bypass multi-factor authentication CVE-2025-371854.8Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to con CVE-2025-371867.8A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking Virtual Intranet Access (VIA) client. Successful CVE-2025-37198.1An access control vulnerability was discovered in the CLI functionality due to a specific access restriction not being properly enforced for CVE-2025-37224.4A path traversal vulnerability in System Information Reporter (SIR) 1.0.3 and prior allowed an authenticated high privileged user to issue CVE-2025-37239.8A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. This issue affects some unknown processing of the component