ZeroHour

CVE-2025-37168

CVSS 3.1
9.1 critical
EPSS
<1%p34
Published
()
Modified
Description

Arbitrary file deletion vulnerability have been identified in a system function of mobility conductors running AOS-8 operating system. Successful exploitation of this vulnerability could allow an unauthenticated remote malicious actor to delete arbitrary files within the affected system and potentially result in denial-of-service conditions on affected devices.

Vendors
arubanetworks
Products
arubaos
Weakness
CWE-552
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

In the news

No ingested article mentions this CVE yet.