CVE-2025-37157 – Authenticated Command Injection allows Unauthorized Command Execution in AOS-CX

CVE ID : CVE-2025-37157

Published : Nov. 18, 2025, 6:48 p.m. | 16 minutes ago

Description : A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an authenticated remote attacker to conduct a Remote Code Execution (RCE) on the affected system.

Severity: 6.7 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…