HP Aruba AOS-10/8 Multiple Vulnerabilities Advisory (CVE-2025-27082 to 27085)

Critical Vulnerability Information Vulnerability Title HP Aruba Networking AOS-10 GW and AOS-8 Mobility Conductor, Controllers, and Gateways - Multiple Vulnerabilities Affected Products HP Aruba Networking - Mobility Conductor - Mobility Controller - WLAN and SD-WAN Gateways Managed by HP Aruba Networking Central Affected Software Versions AOS-10.x x.x 7.1.1 and below AOS-10.x x.x 4.1.6 and below AOS-12.x x.x 12.0.3 and above AOS-8.3.x x.x 10.0.5 and below Unaffected Products Any other HP Aruba Networking products and software versions not explicitly listed above are not affected by these vulnerabilities. Vulnerability Details Authenticated Remote Code Execution Vulnerability (CVE-2025-27082) Description: An authenticated remote code execution vulnerability exists in the Web-Based Management Interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor. CVSS v3.1 Base Score: 7.2 Severity: High Discoverer: ZZ from Moonlight Bug Hunter and LiUPENGs via HPE iDefense Security Response Team Mitigation: For AOS-10 GW, disable access to TCP port 4434 on the gateway from any network to the management IP address. For systems running AOS-8, no mitigation is currently available. Authenticated Command Injection Vulnerability (CVE-2025-27083) Description: An authenticated command injection vulnerability exists in the Web-Based Management Interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor. CVSS v3.1 Base Score: 7.2 Severity: High Discoverer: ZZ from Moonlight Bug Hunter and LiUPENGs via HPE iDefense Security Response Team Mitigation: Same as above. Reflected Cross-Site Scripting (XSS) Vulnerability (CVE-2025-27084) Description: A reflected cross-site scripting (XSS) vulnerability exists in the Web-Based Management Interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor. CVSS v3.1 Base Score: 6.4 Severity: Medium Discoverer: ZZ from Moonlight Bug Hunter and LiUPENGs via HPE iDefense Security Response Team Mitigation: Same as above. Arbitrary File Download Vulnerability (CVE-2025-27085) Description: An arbitrary file download vulnerability exists in the Web-Based Management Interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor. CVSS v3.1 Base Score: 4.9 Severity: Medium Discoverer: ZZ from Moonlight Bug Hunter and LiUPENGs via HPE iDefense Security Response Team Mitigation: Same as above. Solution Upgrade Mobility Conductors, Controllers, and Gateways to the latest applicable AOS-10 or AOS-8 versions to address these vulnerabilities. Support and Public Discussion HPE Aruba Networking is not aware of any public discussion or publicly available exploit code for these specific vulnerabilities.

Goal Reached Thanks to every supporter — we hit 100%!

HP Aruba AOS-10/8 Multiple Vulnerabilities Advisory (CVE-2025-27082 to 27085)