What is CVE-2025-37147?

CVE-2025-37147 is a high-severity vulnerability in Hewlett Packard Enterprise (Hpe) Arubaos (Aos), classified under Authentication Bypass by Spoofing. CVSS score: 7.1/10. Published 2025-10-14.

How severe is CVE-2025-37147?

High severity. CVSS v3 base score is 7.1 out of 10.

Vulnerability in Hewlett Packard Enterprise (Hpe) Arubaos (Aos)

CVE-2025-37147

A Secure Boot Bypass Vulnerability exists in affected Access Points that allows an adversary to bypass the hardware root of trust verification in place to ensure only vendor-signed firmware can execute on the device. An adversary can explo…

EPSS: 0.001 (3.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N.

Affected products

Hewlett Packard Enterprise (Hpe) Arubaos (Aos) — versions 10.7.0.0, 10.4.0.0, 8.13.0.0

Weakness classification (CWE)

CWE-290 — Authentication Bypass by Spoofing

References

security-alert@hpe.com

Frequently asked questions

What is CVE-2025-37147?: CVE-2025-37147 is a high-severity vulnerability in Hewlett Packard Enterprise (Hpe) Arubaos (Aos), classified under Authentication Bypass by Spoofing. CVSS score: 7.1/10. Published 2025-10-14.
How severe is CVE-2025-37147?: High severity. CVSS v3 base score is 7.1 out of 10.