Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

• CVE-2025-37133 High 7.2 Authenticated Command Injection Vulnerability in AOS-8 Controller/Mobility Conductor Web-Based Management Interface via the CLI Binaryalong with accounting controls for tracking and logging user activities and resource usage. 1.2%
• CVE-2025-37132 High 7.2 Authenticated Remote Code Execution Vulnerability in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface via Arbitrary File Write 0.5%
• CVE-2025-37148 Medium 6.5 Kernel Panic triggered by Modified Ethernet Frames leads to Denial of Service Vulnerability 0.3%
• CVE-2025-37147 High 7.1 Secure Boot Bypass allows for Compromise of Hardware Root of Trust 0.2%
• CVE-2025-37146 High 7.2 Unauthorized Filesystem Operations in System Firmware allow Authenticated Remote Code Execution 0.9%