Skip to content
OpenAdvisories
High · 7.8 CVE-2025-37155 EUVD-2025-198074GHSA-r2h8-w7jv-3xg9

Authenticated Privilege Escalation Allows Unauthorized Access in Network Management Interface

Published Nov 18, 2025 · Updated Feb 26, 2026 · Assigned by hpe

Description

A vulnerability in the SSH restricted shell interface of the network management services allows improper access control for authenticated read-only users. If successfully exploited, this vulnerability could allow an attacker with read-only privileges to gain administrator access on the affected system.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) HPE Aruba Networking AOS-CX 10.16.0000 – ≤ 10.16.1000, 10.15.0000 – ≤ 10.15.1020, 10.14.0000 – ≤ 10.14.1050, 10.13.0000 – ≤ 10.13.1090, 10.10.0000 – ≤ 10.10.1160 —

Advisories 1

References