CVE-2025-23051 — Authenticated Remote Code Execution in AOS Web-based Management Interface
An authenticated parameter injection vulnerability exists in the web-based management interface of the AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an…
Published: 2025-01-14 · CVSS: 7.2 · CVSS 3.1
An authenticated parameter injection vulnerability exists in the web-based management interface of the AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated user to leverage parameter injection to overwrite arbitrary system files.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7