PT-2025-4794 · Hewlett Packard · Hpe Aruba Networking Aos

Published 2025-01-14 · Updated 2025-01-23 · CVE-2025-23052

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

The network management service is affected by an authenticated command injection issue in its command line interface, which could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system. Unfortunately, the specific versions of the network management service that are affected are not mentioned. An exploit for this issue may be available, posing a significant security risk and potentially allowing attackers to gain privileged access. #NetworkManagementService #CommandInjection #AuthenticatedVulnerability #PrivilegedAccess #ArbitraryCommandExecution #SecurityRisk #Exploit #NetworkService #CommandLineInterface

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2025-23052

Affected Products

Hpe Aruba Networking Aos

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-23052 · Security Note
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04723en_us&docLocale=en_US · Note
• https://twitter.com/CVEnew/status/1880761206048166280 · Twitter Post
• https://t.me/cvenotify/108441 · Telegram Post
• https://twitter.com/the_yellow_fall/status/1880078249369432356 · Twitter Post
• https://t.me/cvedetector/15317 · Telegram Post
• https://twitter.com/TMJIntel/status/1879645235279540362 · Twitter Post