CVE-2025-37163

High CVSS: 7.2

A command injection vulnerability has been identified in the command line interface of the HPE Aruba Networking Airwave Platform. An authenticated attacker could exploit this vulnerability to execute arbitrary operating system commands with elevated privileges on the underlying operating system.

Vendor

Arubanetworks

Product

Airwave

CWE

CWE-77

Yayın Tarihi

2025-11-18 19:15:48

Güncelleme

2025-12-03 13:34:55

Source Identifier

security-alert@hpe.com

KEV Date Added

Kategoriler

CWE-77 Airwave HIGH Arubanetworks 2025

Referanslar

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04971en_us&docLocale=en_US

Benzer Kayıtlar

Medium

CVE-2026-23810

A vulnerability in the packet processing logic may allow an authenticated attacker to craft and transmit a malicious Wi-…

Medium

CVE-2026-23811

A vulnerability in the client isolation mechanism may allow an attacker to bypass Layer 2 (L2) communication restriction…

Medium

CVE-2026-23812

A vulnerability has been identified where an attacker connecting to an access point as a standard wired or wireless clie…

Medium

CVE-2026-23601

A vulnerability has been identified in the wireless encryption handling of Wi-Fi transmissions. A malicious actor can ge…

Medium

CVE-2026-23808

A vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to i…

Medium

CVE-2026-23809

A technique has been identified that adapts a known port-stealing method to Wi-Fi environments that use multiple BSSIDs.…