CVE-2025-37157 is a command injection vulnerability in the AOS-CX Operating System. An authenticated remote attacker could exploit this flaw to execute arbitrary code remotely on the affected system. The vulnerability has a CVSS v3.1 base score of 6.7, indicating a medium severity level. No specific affected versions or patches are currently documented. No known exploits in the wild have been reported.