Medium severity4.9NVD Advisory· Published Oct 14, 2025· Updated Jun 17, 2026
CVE-2025-37143
CVE-2025-37143
Description
An arbitrary file download vulnerability exists in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an Authenticated malicious actor to download arbitrary files through carefully constructed exploits.
Affected products
4- Hewlett Packard Enterprise (HPE)/ArubaOS (AOS)v5Range: 10.7.0.0
Patches
Vulnerability mechanics
References
1- support.hpe.com/hpesc/public/docDisplaynvdVendor Advisory
News mentions
0No linked articles in our index yet.