Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-37162 EUVD-2025-198085GHSA-rjh3-m3qw-q3cr

Authenticated Command Injection Vulnerability Leading to Arbitrary Remote Command Execution

Published Nov 18, 2025 · Updated Nov 19, 2025 · Assigned by hpe

Description

A vulnerability in the command line interface of affected devices could allow an authenticated remote attacker to conduct a command injection attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) HPE Aruba Networking 100 Series Cellular Bridge 10.7.0.0 – ≤ 10.7.1.1 —

References