CVE-2025-37177Files or Directories Accessible to External Parties in Arubaos

Severity
6.5MEDIUMNVD
EPSS
0.1%
top 73.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJan 13

Description

An arbitrary file deletion vulnerability has been identified in the command-line interface of mobility conductors running either AOS-10 or AOS-8 operating systems. Successful exploitation of this vulnerability could allow an authenticated remote malicious actor to delete arbitrary files within the affected system.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:HExploitability: 1.2 | Impact: 5.2

Affected Packages2 packages

NVDarubanetworks/arubaos6.5.4.08.10.0.21+3
CVEListV5hewlett_packard_enterprise/arubaos10.6.0.010.7.2.1+3

🔴Vulnerability Details

2
GHSA
GHSA-cqwj-xmch-h6q7: An arbitrary file deletion vulnerability has been identified in the command-line interface of mobility conductors running either AOS-10 or AOS-8 opera2026-01-13
CVEList
Authenticated Arbitrary File Deletion Vulnerability in AOS-10 or AOS-8 Command Line Interface (CLI)2026-01-13
CVE-2025-37177 — Arubanetworks Arubaos vulnerability | cvebase