CVE-2025-37148 — Kernel Panic triggered by Modified Ethernet Frames leads to Denial of Service Vulnerability

CVE-2025-37148

Kernel Panic triggered by Modified Ethernet Frames leads to Denial of Service Vulnerability PUBLISHED

Description (CNA)

A vulnerability in the parsing of ethernet frames in AOS-8 Instant and AOS 10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to potentially disrupt network services and require manual intervention to restore functionality.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / ArubaOS (AOS)	affected 10.7.0.0 through 10.7.1.1; affected 10.4.0.0 through 10.4.1.8; affected 8.13.0.0 through 8.13.0.1; affected 8.12.0.0 through 8.12.0.5; affected 8.10.0.0 through 8.10.0.18

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04958en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.