CVE-2025-37138 | HPE ArubaOS Command Line Interface command injection

October 14, 2025 Yanac

A vulnerability identified as critical has been detected in HPE ArubaOS up to 8.10.0.18/8.12.0.5/8.13.0.1/10.4.1.8/10.7.1.1. Affected by this issue is some unknown functionality of the component Command Line Interface. The manipulation leads to command injection.

This vulnerability is referenced as CVE-2025-37138. It is possible to launch the attack on the physical device. No exploit is available.VulDB Recent EntriesRead More