CVE-2025-37132— Authenticated Remote Code Execution Vulnerability in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface via Arbitrary File Write
Quick assessment
Affected
Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
HPE Aruba Networking EdgeConnect OS是美国HPE公司的一个操作系统。 HPE Aruba Networking EdgeConnect OS存在安全漏洞，该漏洞源于基于Web的管理接口存在任意文件写入漏洞，可能导致上传任意文件和执行任意命令。
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-37132
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Authenticated Remote Code Execution Vulnerability in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface via Arbitrary File Write
Source: CVE Program / CVE List V5
Vulnerability Description
An arbitrary file write vulnerability exists in the web-based management interface of both the AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to upload arbitrary files and execute arbitrary commands on the underlying operating system.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
HPE Aruba Networking EdgeConnect OS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
HPE Aruba Networking EdgeConnect OS是美国HPE公司的一个操作系统。 HPE Aruba Networking EdgeConnect OS存在安全漏洞，该漏洞源于基于Web的管理接口存在任意文件写入漏洞，可能导致上传任意文件和执行任意命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Hewlett Packard Enterprise (HPE) | ArubaOS (AOS) | 10.7.0.0 ~ 10.7.1.1 | - |
|
II. Public POCs for CVE-2025-37132
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-37132
请登录查看更多情报信息。
Same Patch Batch · Hewlett Packard Enterprise (HPE) · 2025-10-14 · 18 CVEs total
| CVE-2025-37146 | 7.2 HIGH | Unauthorized Filesystem Operations in System Firmware allow Authenticated Remote Code Exec |
| CVE-2025-37133 | 7.2 HIGH | Authenticated Command Injection Vulnerability in AOS-8 Controller/Mobility Conductor Web-B |
| CVE-2025-37134 | 7.2 HIGH | Authenticated Command Injection Vulnerability in the Low-Level Interface Library Affecting |
| CVE-2025-37147 | 7.1 HIGH | Secure Boot Bypass allows for Compromise of Hardware Root of Trust |
| CVE-2025-37137 | 6.5 MEDIUM | Authenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conduct |
| CVE-2025-37136 | 6.5 MEDIUM | Authenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conduct |
| CVE-2025-37135 | 6.5 MEDIUM | Authenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conduct |
| CVE-2025-37148 | 6.5 MEDIUM | Kernel Panic triggered by Modified Ethernet Frames leads to Denial of Service Vulnerabilit |
| CVE-2025-37138 | 6.2 MEDIUM | Authenticated Command Injection Vulnerability in CLI Binary of AOS-10 GW and AOS-8 Control |
| CVE-2025-37149 | 6.0 MEDIUM | HPE ProLiant RL300 Gen11 Server 安全漏洞 |
| CVE-2025-37139 | 6.0 MEDIUM | Vulnerability in AOS firmware allows for Authenticated Local malicious actor to Permanentl |
| CVE-2025-37140 | 4.9 MEDIUM | Authenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mo |
| CVE-2025-37141 | 4.9 MEDIUM | Authenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mo |
| CVE-2025-37142 | 4.9 MEDIUM | Authenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mo |
| CVE-2025-37143 | 4.9 MEDIUM | Authenticated Arbitrary File Download Vulnerability in CLI Binary of AOS-10 GW and AOS-8 C |
| CVE-2025-37144 | 4.9 MEDIUM | Authenticated Arbitrary File Download Vulnerabilities in a Low-Level Interface Library Aff |
| CVE-2025-37145 | 4.9 MEDIUM | Authenticated Arbitrary File Download Vulnerabilities in a Low-Level Interface Library Aff |
IV. Related Vulnerabilities
Same product: ArubaOS (AOS)
-
CVE-2026-23823
Authenticated Command Injection leads to RCE in AOS-10 CLI C -
CVE-2026-23822
Unauthenticated XML External Entity Injection in AOS-8 Insta -
CVE-2026-23821
Inconsistent input filtering allows Authenticated Command In -
CVE-2026-23820
Inconsistent input filtering allows Authenticated Command In -
CVE-2026-23819
Error in SSID Processing allows Stored XSS in Web Management
Same vendor: Hewlett Packard Enterprise (HPE)
-
CVE-2026-63457
Hewlett Packard Enterprise Integrated Lights-Out 6 安全漏洞 -
CVE-2026-63456
Authentication bypass via spoofed HTTP headers Orchestrator -
CVE-2026-63455
Authentication bypass via spoofed HTTP headers Orchestrator -
CVE-2026-44879
Authenticated Command Injection allows arbitrary command exe -
CVE-2026-44878
Authenticated Path Traversal allows Unauthorized Access in W
V. Comments for CVE-2025-37132
No comments yet