Medium severity4.9NVD Advisory· Published Oct 14, 2025· Updated Jun 17, 2026
CVE-2025-37141
CVE-2025-37141
Description
Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits.
Affected products
4- Hewlett Packard Enterprise (HPE)/ArubaOS (AOS)v5Range: 10.7.0.0
Patches
Vulnerability mechanics
References
1- support.hpe.com/hpesc/public/docDisplaynvdVendor Advisory
News mentions
0No linked articles in our index yet.