AOS-10 GW / AOS-8 Controller/Mobility Conductor vulnerabilities
4 known CVE vulnerabilities in AOS-10 GW / AOS-8 Controller/Mobility Conductor, translated and rated.
- CVE-2025-37145Medium
Arbitrary file download vulnerabilities exist in AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. An authenticated attacker could exploit this to download arbitrary files via crafted exploits.
- CVE-2025-37144Medium
Arbitrary file download vulnerabilities exist in AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. An authenticated attacker could exploit this to download arbitrary files via crafted exploits.
- CVE-2025-37140Medium
Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits.
- CVE-2025-37132High
An arbitrary file write vulnerability exists in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor. Successful exploitation could allow an authenticated attacker to upload arbitrary files and execute arbitrary commands on the underlying OS.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

