CVE-2025-37143

Medium CVSS: 4.9

An arbitrary file download vulnerability exists in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an Authenticated malicious actor to download arbitrary files through carefully constructed exploits.

Vendor

Arubanetworks

Product

Arubaos

CWE

CWE-284

Yayın Tarihi

2025-10-14 17:15:41

Güncelleme

2025-11-12 17:44:20

Source Identifier

security-alert@hpe.com

KEV Date Added

Kategoriler

CWE-284 Arubaos MEDIUM Arubanetworks 2025

Referanslar

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04957en_us&docLocale=en_US

Benzer Kayıtlar

Medium

CVE-2026-23810

A vulnerability in the packet processing logic may allow an authenticated attacker to craft and transmit a malicious Wi-…

Medium

CVE-2026-23811

A vulnerability in the client isolation mechanism may allow an attacker to bypass Layer 2 (L2) communication restriction…

Medium

CVE-2026-23812

A vulnerability has been identified where an attacker connecting to an access point as a standard wired or wireless clie…

Medium

CVE-2026-23601

A vulnerability has been identified in the wireless encryption handling of Wi-Fi transmissions. A malicious actor can ge…

Medium

CVE-2026-23808

A vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to i…

Medium

CVE-2026-23809

A technique has been identified that adapts a known port-stealing method to Wi-Fi environments that use multiple BSSIDs.…