CVE-2025-37132: Authenticated Remote Code Execution Vulnerability in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface via Arbitrary File Write
An arbitrary file write vulnerability exists in the web-based management interface of both the AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to upload arbitrary files and execute arbitrary commands on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37132?
CVE-2025-37132 has a high severity due to the potential for authenticated attackers to execute arbitrary files remotely.
How do I fix CVE-2025-37132?
To fix CVE-2025-37132, it is essential to update the AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems to the latest patched versions provided by the vendor.
Who is affected by CVE-2025-37132?
The vulnerability CVE-2025-37132 affects users of the AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems.
What impact does CVE-2025-37132 have?
Successful exploitation of CVE-2025-37132 can lead to unauthorized file upload and execution on the affected systems.
Is authentication required to exploit CVE-2025-37132?
Yes, exploitation of CVE-2025-37132 requires the attacker to be authenticated to the web-based management interface.