TI-2025-25057 Aliases CVE-2025-37159 GHSA-22q3-4g3j-wq87

Authenticated Session Hijacking Allows Unauthorized Access in Network Switching Software

LOW 34CWE-384Published 2025-11-18 · Updated 2026-02-26

Key facts

Attack vector: Network
Privileges required: Low
User interaction: Required
Attack complexity: Low
Impact type: Spoofing
Confidentiality · integrity · availability: High · High · None
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-384.

Summary

A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an authenticated remote attacker to hijack an active user session. Successful exploitation may enable the attacker to maintain unauthorized access to the session, potentially leading to the view or modification of sensitive configuration data.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00274 19th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Hewlett Packard Enterprise (HPE)	HPE Aruba Networking AOS-CX	10.16.0000 – 10.16.1000; 10.15.0000 – 10.15.1020; 10.14.0000 – 10.14.1050; 10.13.0000 – 10.13.1090; 10.10.0000 – 10.10.1160	—	No fix listed	CNA

HPE Aruba Networking AOS-CX VendorHewlett Packard Enterprise (HPE) Affected 10.16.0000 – 10.16.1000; 10.15.0000 – 10.15.1020; 10.14.0000 – 10.14.1050; 10.13.0000 – 10.13.1090; 10.10.0000 – 10.10.1160 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:o:hpe:arubaos-cx::::::::	10.10.0000 to before 10.10.1170; 10.13.0000 to before 10.13.1101; 10.14.0000 to before 10.14.1060; 10.15.0000 to before 10.15.1030; 10.16.0000 to before 10.16.1001	Vulnerable	Hewlett Packard Enterprise (HPE)

cpe:2.3:o:hpe:arubaos-cx:*:*:*:*:*:*:*:* Versions 10.10.0000 to before 10.10.1170; 10.13.0000 to before 10.13.1101; 10.14.0000 to before 10.14.1060; 10.15.0000 to before 10.15.1030; 10.16.0000 to before 10.16.1001 Vulnerable ·Hewlett Packard Enterprise (HPE)

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2025-37159
2026-10-03 Alias added: GHSA-22q3-4g3j-wq87

References

Advisory 1

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04888en_us&docLocale=en_US

TI-2002-02356 The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side)… CVSS 3.1HIGH 7.5
TI-2026-51814 Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX CVSS 3.1CRITICAL 9.8
TI-2026-19179 Authentication Bypass in Web Interface allows Unauthenticated Admin Password Reset CVSS 3.1CRITICAL 9.8
TI-2026-51843 Credential Manager Vulnerability Allows Unauthorized Administrative Access CVSS 3.1CRITICAL 9.8
TI-2026-19182 Authenticated Command Injection found in admin AOS-CX CLI command CVSS 3.1HIGH 8.8
TI-2023-03473 Authenticated Command Injection Vulnerability in AOS-CX Command Line Interface CVSS 3.1HIGH 8.8

See all 56 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences