Command Injection Vulnerability in AOS-CX Operating System by HPE
CVE-2025-37158

6.7MEDIUM

Key Information:

Vendor

HP (HP)

Status
HP Aruba Networking Aos-cx
Vendor
CVE Published:
18 November 2025

What is CVE-2025-37158?

A command injection vulnerability exists in the AOS-CX Operating System developed by Hewlett Packard Enterprise. This flaw allows an authenticated remote attacker to execute arbitrary code on the affected system by injecting malicious commands. Proper mitigation and updates are crucial to safeguard against potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

HPE Aruba Networking AOS-CX 10.16.0000 <= 10.16.1000

HPE Aruba Networking AOS-CX 10.16.0000 <= 10.16.1000

HPE Aruba Networking AOS-CX 10.15.0000 <= 10.15.1020

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

zzcentury from Ubisetech Sirius Team
JSON
.