CVE-2025-37175

CVE-2025-37175 is an arbitrary file upload vulnerability affecting the web-based management interface of Aruba mobility conductors running AOS-10 or AOS-8. An authenticated attacker can exploit this to upload arbitrary files as a privileged user, leading to arbitrary command execution on the underlying operating system. This vulnerability has a CVSS score of 7.2 (High) due to its network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating potential interest from researchers or threat actors.