Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2025-37147

Secure Boot Bypass allows for Compromise of Hardware Root of Trust

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hpe

Description

A Secure Boot Bypass Vulnerability exists in affected Access Points that allows an adversary to bypass the hardware root of trust verification in place to ensure only vendor-signed firmware can execute on the device. An adversary can exploit this vulnerability to run modified or custom firmware on affected Access Points.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

Default version status: affected

  • 10.7.0.0 to ≤ 10.7.1.1affected
  • 10.4.0.0 to ≤ 10.4.1.8affected
  • 8.13.0.0 to ≤ 8.13.0.1affected
  • 8.12.0.0 to ≤ 8.12.0.5affected
  • 8.10.0.0 to ≤ 8.10.0.18affected

References