PT-2025-41979 · Extreme Networks · Aos-8 Controller/Mobility Conductor

Zzcentury · Published 2025-10-14 · Updated 2025-10-16 · CVE-2025-37135

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions AOS-8 Controller/Mobility Conductor (affected versions not specified)

Description The command-line interface of the AOS-8 Controller/Mobility Conductor contains flaws that allow an authenticated remote attacker to delete arbitrary files within the system. Exploitation of these issues could lead to unauthorized file deletion.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-37135

Affected Products

Aos-8 Controller/Mobility Conductor

References · 5

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04957en_us&docLocale=en_US · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-37135 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-37135 · Security Note
• https://t.me/cveNotify/138598 · Telegram Post
• https://twitter.com/CVEnew/status/1978932585410805982 · Twitter Post