Threat Investigation
Request a demo

CVE-2025-37162

Medium

Description

A vulnerability in the command line interface of affected devices could allow an authenticated remote attacker to conduct a command injection attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

SeverityMedium
CVSS6.5
Exploit probability—
ProductArubanetworks Arubaos
PublishedNov 18, 2025
First seenNov 18, 2025
Weakness typeCWE-77Command injection

How to fix

Update
  • arubanetworks arubaos10.7.2.0 or later

Affected products

ProductAffected versionsFixed in
arubanetworks arubaos10.7.1.0 ≤ v < 10.7.2.010.7.2.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.