Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-37176

A command injection vulnerability in AOS-8 allows an authenticated privileged user to alter a package header to inject shell commands, potentially affecting the execution of internal operations. Successful exploit could allow an authenticated malicious actor to execute commands with the privileges of the impacted mechanism.

Published

2026-01-13T20:16:05.717

Last Modified

2026-01-23T16:12:02.550

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-77
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System arubanetworks arubaos < 8.10.0.21 Yes
Operating System arubanetworks arubaos < 8.13.1.1 Yes
References