Vulnerability Database

313,825

Total vulnerabilities in the database

CVE-2025-37157

A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an authenticated remote attacker to conduct a Remote Code Execution (RCE) on the affected system.

  • Published: Nov 18, 2025
  • Updated: Nov 19, 2025
  • CVE: CVE-2025-37157
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.7
  • AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
hpe / arubaos-cx 10.10.0000 10.10.1170
hpe / arubaos-cx 10.13.0000 10.13.1101
hpe / arubaos-cx 10.14.0000 10.14.1060
hpe / arubaos-cx 10.15.0000 10.15.1030
hpe / arubaos-cx 10.16.0000 10.16.1001