Overview
A newly discovered vulnerability in the APIs of HPE Aruba Networking Private 5G Core has been identified. This vulnerability, designated as CVE-2025-37100, could potentially expose sensitive information to unauthorized users. The flaw is significant, as it affects a core component of the Aruba Networking 5G system, potentially impacting a large number of users and enterprises relying on this technology for their networking needs.
Vulnerability Summary
CVE ID: CVE-2025-37100
Severity: High (7.7)
Attack Vector: Network
Privileges Required: None
User Interaction: None
Impact: System compromise, unauthorized access to sensitive data, potential data leakage
Affected Products
Escape the Surveillance Era
Most apps won’t tell you the truth.
They’re part of the problem.
Phone numbers. Emails. Profiles. Logs.
It’s all fuel for surveillance.
Ameeba Chat gives you a way out.
- • No phone number
- • No email
- • No personal info
- • Anonymous aliases
- • End-to-end encrypted
Chat without a trace.
Product | Affected Versions
HPE Aruba Networking Private 5G Core | All versions prior to the patch
How the Exploit Works
The vulnerability lies within the APIs of HPE Aruba Networking Private 5G Core. An attacker could exploit this weakness by sending specifically crafted requests to these APIs. This would allow the attacker to iteratively navigate through the filesystem, gaining unauthorized access to protected system files that contain sensitive information. The attacker could then download these files, leading to a potential data leakage situation.
Conceptual Example Code
Below is a conceptual example of how this vulnerability might be exploited. This example uses a HTTP request targeting the vulnerable endpoint of the system.
GET /api/filesystem/navigate?path=/sensitive/data HTTP/1.1
Host: target.example.comMitigation and Patching
The vendor has released a patch to address this vulnerability. It is strongly recommended that all users update their systems to the patched version as soon as possible. As a temporary measure, a Web Application Firewall (WAF) or Intrusion Detection System (IDS) could be utilized to monitor and block potentially malicious requests targeting the vulnerable API endpoints.
