CVE-2025-37142: Authenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management Interface
Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37142?
CVE-2025-37142 has a critical severity rating due to the potential for authenticated attackers to exploit arbitrary file downloads.
How do I fix CVE-2025-37142?
To fix CVE-2025-37142, you should update the affected AOS operating systems to the latest patched version provided by AOS.
Who is affected by CVE-2025-37142?
CVE-2025-37142 affects users of AOS-10 GW, AOS-8 Controller, and AOS Mobility Conductor.
What systems are impacted by CVE-2025-37142?
The systems impacted by CVE-2025-37142 include AOS-10 Gateway, AOS-8 Controller, and Mobility Conductor operating systems.
Can CVE-2025-37142 be exploited remotely?
CVE-2025-37142 requires authentication, meaning it can only be exploited by a malicious actor who has already gained access to the system.