CVE-2025-37163: Authenticated Command Injection Vulnerability in HPE Aruba Networking Management Software (AirWave) CLI
A command injection vulnerability has been identified in the command line interface of the HPE Aruba Networking Airwave Platform. An authenticated attacker could exploit this vulnerability to execute arbitrary operating system commands with elevated privileges on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37163?
CVE-2025-37163 is rated as a high-severity command injection vulnerability.
How do I fix CVE-2025-37163?
To mitigate CVE-2025-37163, ensure you apply the latest security patches and updates to the HPE Aruba Networking Airwave Platform.
Who is affected by CVE-2025-37163?
CVE-2025-37163 affects users of the HPE Aruba Networking Airwave Platform who have authenticated access.
What kind of exploit is possible with CVE-2025-37163?
CVE-2025-37163 allows an authenticated attacker to execute arbitrary operating system commands with elevated privileges.
Is there a workaround for CVE-2025-37163?
Currently, it is recommended to limit user access and apply vendor fixes as there are no official workarounds for CVE-2025-37163.