TI-2025-25058 Aliases CVE-2025-37160 GHSA-px47-3rg8-h2rq

Authenticated Broken Access Control (BAC) in REST API Configuration Service

LOW 35CWE-200Published 2025-11-18 · Updated 2025-11-18

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: High · None · None
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-200.

Summary

A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation of this vulnerability could enable the attacker to disclose sensitive data.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00305 23rd percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Hewlett Packard Enterprise (HPE)	HPE Aruba Networking AOS-CX	10.16.0000 – 10.16.1000; 10.15.0000 – 10.15.1020; 10.14.0000 – 10.14.1050; 10.13.0000 – 10.13.1090; 10.10.0000 – 10.10.1160	—	No fix listed	CNA

HPE Aruba Networking AOS-CX VendorHewlett Packard Enterprise (HPE) Affected 10.16.0000 – 10.16.1000; 10.15.0000 – 10.15.1020; 10.14.0000 – 10.14.1050; 10.13.0000 – 10.13.1090; 10.10.0000 – 10.10.1160 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:o:hpe:arubaos-cx::::::::	10.10.0000 to before 10.10.1170; 10.13.0000 to before 10.13.1101; 10.14.0000 to before 10.14.1060; 10.15.0000 to before 10.15.1030; 10.16.0000 to before 10.16.1001	Vulnerable	Hewlett Packard Enterprise (HPE)

cpe:2.3:o:hpe:arubaos-cx:*:*:*:*:*:*:*:* Versions 10.10.0000 to before 10.10.1170; 10.13.0000 to before 10.13.1101; 10.14.0000 to before 10.14.1060; 10.15.0000 to before 10.15.1030; 10.16.0000 to before 10.16.1001 Vulnerable ·Hewlett Packard Enterprise (HPE)

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2025-37160
2026-10-03 Alias added: GHSA-px47-3rg8-h2rq

References

Advisory 1

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04888en_us&docLocale=en_US

TI-2002-02356 The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side)… CVSS 3.1HIGH 7.5
TI-2026-51814 Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX CVSS 3.1CRITICAL 9.8
TI-2026-19179 Authentication Bypass in Web Interface allows Unauthenticated Admin Password Reset CVSS 3.1CRITICAL 9.8
TI-2026-51843 Credential Manager Vulnerability Allows Unauthorized Administrative Access CVSS 3.1CRITICAL 9.8
TI-2026-19182 Authenticated Command Injection found in admin AOS-CX CLI command CVSS 3.1HIGH 8.8
TI-2023-03473 Authenticated Command Injection Vulnerability in AOS-CX Command Line Interface CVSS 3.1HIGH 8.8

See all 56 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences