CVE-2025-37132

Name of the Vulnerable Software and Affected Versions AOS-10 GW (affected versions not specified) AOS-8 Controller/Mobility Conductor (affected versions not specified)

Description An arbitrary file write issue exists in the web-based management interface. Successful exploitation could allow an authenticated malicious actor to upload arbitrary files and execute arbitrary commands on the underlying operating system. The vulnerability affects both AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.