8.2
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Description
Arbitrary file deletion vulnerability have been identified in a system function of mobility conductors running AOS-8 operating system. Successful exploitation of this vulnerability could allow an unauthenticated remote malicious actor to delete arbitrary files within the affected system and potentially result in denial-of-service conditions on affected devices.
Basic Information
ID
CVE-2025-37168
Source
hpe
Published
Jan 13, 2026 at 20:03
Modified
Jan 13, 2026 at 20:06
Affected Product
Vendor
Hewlett Packard Enterprise (HPE)
Product
ArubaOS (AOS)
Version
8.12.0.0
Affected Versions
Hewlett Packard Enterprise (HPE) ArubaOS (AOS) 8.12.0.0
Hewlett Packard Enterprise (HPE) ArubaOS (AOS) 8.10.0.0
Hewlett Packard Enterprise (HPE) ArubaOS (AOS) 8.10.0.0