CVE-2025-37145: Authenticated Arbitrary File Download Vulnerabilities in a Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface
Arbitrary file download vulnerabilities exist in a low-level interface library in AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37145?
CVE-2025-37145 is classified as a medium severity vulnerability due to the potential for arbitrary file download by an authenticated attacker.
How do I fix CVE-2025-37145?
To mitigate CVE-2025-37145, update to the latest version of the affected AOS software where applicable.
What systems are affected by CVE-2025-37145?
CVE-2025-37145 affects AOS-10 GW, AOS-8 Controller, and Mobility Conductor operating systems.
Can CVE-2025-37145 be exploited remotely?
CVE-2025-37145 requires an authenticated malicious actor to exploit the vulnerability, meaning remote execution is not possible without authentication.
What could an attacker achieve by exploiting CVE-2025-37145?
Exploitation of CVE-2025-37145 could allow an attacker to download arbitrary files from the system.