Skip to content
OpenAdvisories
Medium · 6.8 CVE-2025-37156 EUVD-2025-198070GHSA-vj2x-2m5r-mx2p

ArubaOS-CX Platform-Level Denial-of-Service Vulnerability

Published Nov 18, 2025 · Updated Nov 18, 2025 · Assigned by hpe

Description

A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software. Successful exploitation of this vulnerability could allow an attacker with administrative access to execute specific code that renders the switch non-bootable and effectively non-functional.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) HPE Aruba Networking AOS-CX 10.16.0000 – ≤ 10.16.1000, 10.15.0000 – ≤ 10.15.1020, 10.14.0000 – ≤ 10.14.1050, 10.13.0000 – ≤ 10.13.1090, 10.10.0000 – ≤ 10.10.1160 —

Advisories 1

References