Known vulnerabilities in Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-37133 | An authenticated command injection vulnerability exists in the CLI binary of an AOS-8 Controller/Mobility Conductor… | 7.2 High | Oct 14, 2025 |
| CVE-2025-37132 | An arbitrary file write vulnerability exists in the web-based management interface of both the AOS-10 GW and AOS-8… | 7.2 High | Oct 14, 2025 |
| CVE-2025-37148 | A vulnerability in the parsing of ethernet frames in AOS-8 Instant and AOS 10 could allow an unauthenticated remote… | 6.5 Medium | Oct 14, 2025 |
| CVE-2025-37147 | A Secure Boot Bypass Vulnerability exists in affected Access Points that allows an adversary to bypass the hardware root… | 7.1 High | Oct 14, 2025 |
| CVE-2025-37146 | Unauthorized Filesystem Operations in System Firmware allow Authenticated Remote Code Execution | 7.2 High | Oct 14, 2025 |
Other Hewlett Packard Enterprise (HPE) products
Fabric Composer 98
Unknown product 71
Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central 51
AOS-CX 46
EdgeConnect SD-WAN Gateways 38
ClearPass Policy Manager (CPPM) 36
Aruba ClearPass Policy Manager 33
HPE Aruba Networking Wireless Operating System (AOS) 27
EdgeConnect SD-WAN Orchestrator 27
Aruba EdgeConnect Enterprise Software 23
Instant On 20
AOS-8 Instant and AOS-10 AP 18