CVE-2025-37148: Kernel Panic triggered by Modified Ethernet Frames leads to Denial of Service Vulnerability
A vulnerability in the parsing of ethernet frames in AOS-8 Instant and AOS 10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to potentially disrupt network services and require manual intervention to restore functionality.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37148?
CVE-2025-37148 has a high severity level due to its potential for leading to denial of service attacks.
How do I fix CVE-2025-37148?
To mitigate CVE-2025-37148, you should update to the latest patched version of AOS-8 Instant or AOS 10.
What are the affected products for CVE-2025-37148?
CVE-2025-37148 affects AOS-8 Instant and AOS 10 software versions.
What can an attacker achieve by exploiting CVE-2025-37148?
An attacker exploiting CVE-2025-37148 can disrupt network services, resulting in a denial of service.
Is user authentication required to exploit CVE-2025-37148?
No, CVE-2025-37148 can be exploited by unauthenticated remote attackers.