CVE-2025-23052

Authenticated command injection vulnerability in the command line interface of a network management service. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.

Score

CVSS 3.1 7.2 High

Status

Deferred - security-alert@hpe.com

Published

2025-01-14

Last modified

2025-01-23

Weaknesses

CWE-77

Affected products

• Hpe Aruba Networking Aos (Hewlett Packard Enterprise Hpe)

References

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04723en_us&docLocale=en_US