7.2
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
A command injection vulnerability has been identified in the command line interface of the HPE Aruba Networking Airwave Platform. An authenticated attacker could exploit this vulnerability to execute arbitrary operating system commands with elevated privileges on the underlying operating system.
Basic Information
ID
CVE-2025-37163
Source
hpe
Published
Nov 18, 2025 at 19:06
Affected Product
Vendor
Hewlett Packard Enterprise (HPE)
Product
HPE Aruba Networking Management Software (Airwave)
Version
8.3.0.0
Affected Versions
Hewlett Packard Enterprise (HPE) HPE Aruba Networking Management Software (Airwave) 8.3.0.0