5.8
Medium
CVE-2025-37159 A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an…
Description
A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an authenticated remote attacker to hijack an active user session. Successful exploitation may enable the attacker to maintain unauthorized access to the session, potentially leading to the view or modification of sensitive configuration data.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HPE Aruba Networking AOS-CX 10.16 | 10.16.0000 → 10.16.1000 | No fix stated |
| HPE Aruba Networking AOS-CX 10.15 | 10.15.0000 → 10.15.1020 | No fix stated |
| HPE Aruba Networking AOS-CX 10.14 | 10.14.0000 → 10.14.1050 | No fix stated |
| HPE Aruba Networking AOS-CX 10.13 | 10.13.0000 → 10.13.1090 | No fix stated |
| HPE Aruba Networking AOS-CX 10.10 | 10.10.0000 → 10.10.1160 | No fix stated |
Other CVEs of HPE Aruba Networking AOS-CX
The 5 CVEs of HPE Aruba Networking AOS-CX →
CVE-2025-37160
A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote…
5.3
Medium
CVE-2025-37158
A command injection vulnerability exists in the AOS-CX Operating System
6.7
Medium
CVE-2025-37156
A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software
6.8
Medium
CVE-2025-37155
A vulnerability in the SSH restricted shell interface of the network management services allows improper access…
7.8
High