CVE-2025-27079 — Arbitrary File Creation vulnerability allows for Authenticated Remote Code Execution in CLI Interface

CVE-2025-27079

Arbitrary File Creation vulnerability allows for Authenticated Remote Code Execution in CLI Interface PUBLISHED

Description (CNA)

A vulnerability in the file creation process on the command line interface of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to perform remote code execution (RCE). Successful exploitation could allow an attacker to execute arbitrary operating system commands on the underlying operating system leading to potential system compromise.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / AOS-10 AP	affected 10.7.0.0 through 10.7.0.1; affected 10.4.0.0 through 10.4.1.5; affected 8.12.0.0 through 8.12.0.3; affected 8.10.0.0 through 8.10.0.15

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04844en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.