Arbitrary File Download Vulnerability in AOS-10 GW and AOS-8 Controller by HPE

CVE-2025-37144

What is CVE-2025-37144?

The AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems developed by HPE are affected by vulnerabilities that allow authenticated attackers to exploit a low-level interface library. By employing tailored techniques, these actors can gain unauthorized access to download arbitrary files from the system. Proper security measures and patches should be enforced to mitigate risks associated with these vulnerabilities, ensuring the safety and integrity of sensitive information.

References