CVE-2025-37175 is an arbitrary file upload vulnerability identified in Hewlett Packard Enterprise's ArubaOS (AOS) operating system, specifically affecting mobility conductors running versions 8.10.0.0, 8.12.0.0, 10.3.0.0, and 10.6.0.0. The vulnerability resides in the web-based management interface, which is used for configuring and managing network mobility conductors. An authenticated attacker with high privileges can exploit this flaw to upload arbitrary files to the system. This capability enables the attacker to execute arbitrary commands on the underlying operating system, potentially leading to full system compromise. The vulnerability is classified under CWE-434 (Unrestricted Upload of File with Dangerous Type). The CVSS v3.1 base score is 7.2, indicating high severity, with attack vector network (remote), low attack complexity, high privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. Although no public exploits have been reported yet, the vulnerability poses a significant risk due to the critical role of ArubaOS in enterprise network infrastructure. The lack of available patches at the time of reporting necessitates immediate risk mitigation through access controls and monitoring.

For European organizations, this vulnerability could lead to unauthorized control over critical network infrastructure components, resulting in data breaches, network disruptions, and potential lateral movement within corporate networks. The compromise of ArubaOS mobility conductors could allow attackers to intercept or manipulate network traffic, degrade network availability, or deploy persistent malware. Given the widespread use of HPE Aruba products in Europe’s enterprise and public sectors, the impact could be substantial, affecting confidentiality of sensitive data, integrity of network configurations, and availability of network services. Organizations in sectors such as finance, telecommunications, government, and critical infrastructure are particularly at risk due to their reliance on secure and stable network operations.

1. Immediately restrict access to the ArubaOS web management interface to trusted administrators only, ideally via VPN or dedicated management networks. 2. Enforce strong authentication mechanisms and limit the number of users with high privilege access. 3. Monitor logs and network traffic for unusual file upload activities or command execution patterns on mobility conductors. 4. Implement network segmentation to isolate ArubaOS devices from general user networks. 5. Apply vendor patches promptly once they become available; maintain close communication with HPE for updates. 6. Conduct regular security audits and vulnerability assessments on ArubaOS devices. 7. Consider deploying application-layer firewalls or intrusion detection systems capable of detecting anomalous management interface activities. 8. Educate administrators on the risks of arbitrary file uploads and the importance of secure credential management.