Aruba Security Updates – 11 June 2025

The addressed vulnerabilities could allow the attacker to obtain sensitive information, perform path traversal, perform denial of service attacks, or execute arbitrary code and gain access to the affected system.

Sample of the addressed vulnerabilities:

1. HPE Aruba Networking Private 5G Core Exposure of Sensitive Information Vulnerability (CVE-2025-37100):

• CVSS: 7.7
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: Low
• User Interaction: None
• Consequences: Obtain Information

2. HPE StoreEasy Servers Denial of Service Vulnerability (CVE-2025-2884):

• CVSS: 6.5
• Attack Vector: Local
• Attack Complexity: Low
• Privileges Required: Low
• User Interaction: None
• Consequences: Denial of Service

Sample of The Affected Products:

• HPE Brocade Fabric.
• HPE Aruba Networking Private 5G Core Platform.
• HPE DL/ML.
• HPE StoreEasy Servers.
• HPE ProLiant AMD DL/XL Servers.
• HPE MicroServer.
• HPE Synergy.