CVE 7.2 HIGH

Authenticated Command Injection Vulnerability in HPE Aruba Networking Management Software (AirWave) CLI_CVE-2025-37163

7.2 / 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

A command injection vulnerability has been identified in the command line interface of the HPE Aruba Networking Airwave Platform. An authenticated attacker could exploit this vulnerability to execute arbitrary operating system commands with elevated privileges on the underlying operating system.

Basic Information

ID CVE-2025-37163
Source hpe
Published Nov 18, 2025 at 19:06

Affected Product

Vendor Hewlett Packard Enterprise (HPE)
Product HPE Aruba Networking Management Software (Airwave)
Version 8.3.0.0
Affected Versions Hewlett Packard Enterprise (HPE) HPE Aruba Networking Management Software (Airwave) 8.3.0.0

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.