CNNVD-202510-1938 Information

CNNVD ID

CNNVD-202510-1938

CVE-2025-37143

  • CNNVD Published: 2025-10-14

Description (Chinese)

Hewlett Packard Enterprise ArubaOS(HPE ArubaOS)是美国慧与(Hewlett Packard Enterprise)公司的一个网络无线操作系统。 Hewlett Packard Enterprise ArubaOS(HPE ArubaOS)存在安全漏洞,该漏洞源于基于Web的管理界面存在任意文件下载漏洞,可能导致经过身份验证的攻击者下载任意文件。

Description (English)

Hewlett Packard Enterprise ArubaOS is a network wireless operating system of Hewlett Packard Enterprise. There is a security loophole in Hewlett Packard Enterprise ArubaOS (HPE ArubaOS), which stems from an arbitrary file download loophole in the management interface based on Web, which may lead to any document being downloaded by an identified assailant.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

慧与科技

Published

2025-10-14

Last Modified

2026-02-24

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04957en_us&docLocale=en_US https://access.redhat.com/security/cve/cve-2025-37143

Patch

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04957en_us&docLocale=en_US

Share on: