CVEvulnerability

CVE-2025-37176

7.2 HIGH Published 2026-01-13 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2026-01-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS 3.1 ([email protected])
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-77

Description

A command injection vulnerability in AOS-8 allows an authenticated privileged user to alter a package header to inject shell commands, potentially affecting the execution of internal operations. Successful exploit could allow an authenticated malicious actor to execute commands with the privileges of the impacted mechanism.

Affected configurations

• arubanetworks arubaos (>= 8.6.0.0 < 8.10.0.21) • arubanetworks arubaos (>= 8.11.0.0 < 8.13.1.1)

Related

Weakness · CWE (1)

  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References