CVE-2025-23051

Summary

CVE-2025-23051 is a vulnerability affecting the web-based management interface of AOS-8 and AOS-10 Operating Systems. An authenticated user can exploit a parameter injection flaw to overwrite arbitrary system files, potentially leading to significant security implications. This vulnerability allows injecting malicious code into system parameters, bypassing input validation checks, and causing unintended consequences. Successful exploitation could result in unauthorized system modifications or data corruption. It is crucial for organizations using these operating systems to apply the necessary patches as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.