CVE-2025-27085: Arbitrary File Download Vulnerabilities in Web-Based Management Interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor
Multiple vulnerabilities exist in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor. Successful exploitation of these vulnerabilities could allow an authenticated, remote attacker to download arbitrary files from the filesystem of an affected device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-27085?
The severity of CVE-2025-27085 is critical due to the potential for unauthorized file access and system compromise.
How do I fix CVE-2025-27085?
To fix CVE-2025-27085, apply the latest security patches provided by Aruba for AOS-10 GW and AOS-8 Controller/Mobility Conductor.
What are the impacts of CVE-2025-27085?
CVE-2025-27085 can allow authenticated remote attackers to download arbitrary files, potentially leading to data leaks and further exploitation.
Who is affected by CVE-2025-27085?
CVE-2025-27085 affects users of Aruba AOS-10 GW and AOS-8 Controller/Mobility Conductor who utilize the web-based management interface.
Can CVE-2025-27085 be exploited remotely?
Yes, CVE-2025-27085 can be exploited remotely by authenticated attackers accessing the web-based management interface.