7.2
CVE-2025-37175
- EPSS 0.08%
- Veröffentlicht 13.01.2026 20:07:34
- Zuletzt bearbeitet 23.01.2026 16:37:56
- Quelle security-alert@hpe.com
- CVE-Watchlists
- Unerledigt
Authenticated Arbitrary File Upload Vulnerability in AOS-10 or AOS-8 Web-Based Management Interface
Arbitrary file upload vulnerability exists in the web-based management interface of mobility conductors running either AOS-10 or AOS-8 operating systems. Successful exploitation could allow an authenticated malicious actor to upload arbitrary files as a privilege user and execute arbitrary commands on the underlying operating system.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Arubanetworks ≫ Arubaos Version >= 6.5.4.0 < 8.10.0.21
Arubanetworks ≫ Arubaos Version >= 8.11.0.0 < 8.13.1.1
Arubanetworks ≫ Arubaos Version >= 10.3.0.0 < 10.4.1.10
Arubanetworks ≫ Arubaos Version >= 10.5.0.0 < 10.7.2.2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.08% | 0.244 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| security-alert@hpe.com | 7.2 | 1.2 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|
CWE-434 Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.