CVE-2025-37159: Authenticated Session Hijacking Allows Unauthorized Access in Network Switching Software
A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an authenticated remote attacker to hijack an active user session. Successful exploitation may enable the attacker to maintain unauthorized access to the session, potentially leading to the view or modification of sensitive configuration data.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37159?
CVE-2025-37159 is considered a critical vulnerability due to its potential to allow session hijacking of authenticated users.
How do I fix CVE-2025-37159?
To mitigate CVE-2025-37159, you should upgrade to a version of HPE ArubaOS-CX that is not affected by this vulnerability.
Which versions of HPE ArubaOS-CX are affected by CVE-2025-37159?
CVE-2025-37159 affects HPE ArubaOS-CX versions from 10.10.0000 to 10.10.1170, 10.13.0000 to 10.13.1101, 10.14.0000 to 10.14.1060, 10.15.0000 to 10.15.1030, and 10.16.0000 to 10.16.1001.
What can an attacker do with CVE-2025-37159?
An attacker exploiting CVE-2025-37159 could hijack an active user session, leading to unauthorized access and control over user activities.
Is authentication required to exploit CVE-2025-37159?
Yes, CVE-2025-37159 requires the attacker to be authenticated before they can hijack an active user session.