Denial-of-Service Vulnerability in ArubaOS-CX by HPE
CVE-2025-37156
6.8MEDIUM
What is CVE-2025-37156?
A critical denial-of-service vulnerability exists within ArubaOS-CX software, where an attacker with administrative privileges can exploit this flaw. Successful exploitation may lead to a critical situation where the switch becomes non-bootable and ceases to function, severely impacting network operations. This vulnerability underscores the importance of maintaining up-to-date software and applying security patches promptly to protect against such attacks.
Affected Version(s)
HPE Aruba Networking AOS-CX 10.16.0000 <= 10.16.1000
HPE Aruba Networking AOS-CX 10.16.0000 <= 10.16.1000
HPE Aruba Networking AOS-CX 10.15.0000 <= 10.15.1020