Medium severity4.9NVD Advisory· Published Apr 8, 2025· Updated Jun 17, 2026
CVE-2025-27085
CVE-2025-27085
Description
Multiple vulnerabilities exist in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor. Successful exploitation of these vulnerabilities could allow an authenticated, remote attacker to download arbitrary files from the filesystem of an affected device.
Affected products
3- Hewlett Packard Enterprise (HPE)/HPE Aruba Networking AOSv5Range: 10.7.0.0
Patches
Vulnerability mechanics
References
1- support.hpe.com/hpesc/public/docDisplaynvdVendor Advisory
News mentions
0No linked articles in our index yet.