CVE-2025-37161CWE-400denial-of-service

CVE-2025-37161

High · published November 19, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
34.9
In the wild
Unconfirmed
What it is

⚡ A simple request to the management interface could send your system crashing into a never-ending reboot loop! Think of it like a restaurant's power grid tripped by a mischievous prankster — the lights go out, the kitchen halts, and the customers are left in the dark while the staff scrambles to fix things. This vulnerability takes down the entire network operation, leaving you in a bind! An attacker can exploit this vulnerability to cause a denial of service, crashing your system and preventing it from rebooting without manual assistance. This disruption can halt your network operations completely, leading to costly downtime and frustrated users. It's like having your restaurant's power cut just before the dinner rush — chaos ensues!

Put simply

Think of it like a restaurant's power grid tripped by a mischievous prankster — the lights go out, the kitchen halts, and the customers are left in the dark while the staff scrambles to fix things. This vulnerability takes down the entire network operation, leaving you in a bind! This vulnerability exists in the web-based management interface, allowing unauthenticated remote attackers to trigger a state that crashes the system. The failure to handle specific requests properly leads to a denial of service condition, requiring manual intervention to restore functionality.

What to do

An attacker can exploit this vulnerability to cause a denial of service, crashing your system and preventing it from rebooting without manual assistance. This disruption can halt your network operations completely, leading to costly downtime and frustrated users. It's like having your restaurant's power cut just before the dinner rush — chaos ensues! To safeguard against this, update to the latest version of the affected products immediately and implement strict access controls to your management interfaces. Regularly audit your system configurations to ensure nothing is left exposed and vulnerable. 🛡️ You've got this! Taking these steps will have you back on track and your systems secured in no time! 💪✨

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00417 · 34.9th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2025-11-19T01:15Z
Affected products (1)
ProductVersionsFixed in
arubanetworks/arubaos≥ 10.7.1.0, < 10.7.2.010.7.2.0
References (1)
EPSS history
Timeline
  • 18 NOV 19:21Z
    Unauthenticated Remote Denial-of-Service (DoS) Vulnerability in Web Management Interface
    cvelistv5