VULNERABILITY INTELLIGENCE

CVE-2025-37132

CVSS score7.2 HIGH

EPSS probability0.55%

CISA KEVNot currently listed

Published2025-10-14

Last modified2026-10-08

Description

An arbitrary file write vulnerability exists in the web-based management interface of both the AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to upload arbitrary files and execute arbitrary commands on the underlying operating system.