5.3
Medium
CVE-2025-37160 A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote…
Description
A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation of this vulnerability could enable the attacker to disclose sensitive data.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HPE Aruba Networking AOS-CX 10.16 | 10.16.0000 → 10.16.1000 | No fix stated |
| HPE Aruba Networking AOS-CX 10.15 | 10.15.0000 → 10.15.1020 | No fix stated |
| HPE Aruba Networking AOS-CX 10.14 | 10.14.0000 → 10.14.1050 | No fix stated |
| HPE Aruba Networking AOS-CX 10.13 | 10.13.0000 → 10.13.1090 | No fix stated |
| HPE Aruba Networking AOS-CX 10.10 | 10.10.0000 → 10.10.1160 | No fix stated |
Other CVEs of HPE Aruba Networking AOS-CX
The 5 CVEs of HPE Aruba Networking AOS-CX →
CVE-2025-37159
A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an…
5.8
Medium
CVE-2025-37158
A command injection vulnerability exists in the AOS-CX Operating System
6.7
Medium
CVE-2025-37156
A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software
6.8
Medium
CVE-2025-37155
A vulnerability in the SSH restricted shell interface of the network management services allows improper access…
7.8
High