Arubaos Cx
CVE-2025-37156
MEDIUM
Severity by source
AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionCVE.org
A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software. Successful exploitation of this vulnerability could allow an attacker with administrative access to execute specific code that renders the switch non-bootable and effectively non-functional.
AnalysisAI
A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Technical ContextAI
A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software. Successful exploitation of this vulnerability could allow an attacker with administrative access to execute specific code that renders the switch non-bootable and effectively non-functional. Affected products include: Hpe Arubaos-Cx.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Arubaos Cx
View allAuth bypass in HPE Aruba AOS-CX switch web management.
Authenticated remote attackers can execute arbitrary commands through malformed parameters in AOS-CX CLI commands, achie
An authenticated command injection vulnerability exists in the AOS-CX command line interface. Rated high severity (CVSS
An authenticated remote code execution vulnerability exists in the AOS-CX Network Analytics Engine. Rated high severity
Authenticated administrators of AOS-CX Switches can inject arbitrary commands through a custom binary in the CLI, potent
Authenticated attackers can execute arbitrary OS commands on AOS-CX Switches through improper input validation in the CL
web-based management interface of AOS-CX Switches is affected by url redirection to untrusted site (open redirect) (CVSS
A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote at
A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an authenticate
A command injection vulnerability exists in the AOS-CX Operating System. Rated medium severity (CVSS 6.7), this vulnerab
A command injection vulnerability exists in the AOS-CX Operating System. Rated medium severity (CVSS 6.7), this vulnerab
A vulnerability in the SSH restricted shell interface of the network management services allows improper access control
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today