CVE-2025-37158 is a command injection vulnerability in the AOS-CX Operating System that allows an authenticated remote attacker to execute arbitrary commands remotely. The vulnerability requires high attack complexity and no user interaction but does not require privileges. It has a medium severity score of 6.7.