vulnerability
Aruba AOS-CX: CVE-2025-25042: Authenticated Access Control Vulnerability allows Sensitive Information Disclosure in AOS-CX REST Interface
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:L/Au:S/C:P/I:N/A:N) | Mar 18, 2025 | Mar 20, 2025 | Apr 2, 2026 |
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:P/I:N/A:N)
Published
Mar 18, 2025
Added
Mar 20, 2025
Modified
Apr 2, 2026
Description
A vulnerability in the AOS-CX REST interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation could allow an attacker to read encrypted credentials of other users on the switch, potentially leading to further unauthorized access or data breaches.
Solution
aruba-aos-cx-cve-2025-25042
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.