PT-2026-2457 · Aos-8+1 · Aos-8+1

Moonv · Publicado 2026-01-13 · Atualizado 2026-01-13 · CVE-2025-37173

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AOS-10 AOS-8

Description An improper input handling issue exists in the web-based management interface of mobility conductors. Exploitation could allow an authenticated malicious actor with valid credentials to trigger unintended behavior on the affected system. The vulnerability is present in the way the system handles input.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2025-37173

Produtos afetados

Aos 10

Aos-8

Referências · 4

• https://twitter.com/CVEnew/status/2011181466965983389 · Publicação no Twitter
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04987en_us&docLocale=en_US · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-37173 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-37173 · Nota de Segurança