HPE OneView: Schwachstelle ermöglicht Codeausführung
WID-SEC-2025-2867 · first 17.12.2025 · updated 08.01.2026 · CVSS 10,0
What it is about
HPE OneView bietet softwaredefinierte Analysen und eine einheitliche API für den Aufbau und die Verwaltung der IT-Infrastruktur. Ein entfernter, anonymer Angreifer kann eine Schwachstelle in HPE OneView ausnutzen, um beliebigen Programmcode auszuführen.
Under what conditions?
Over the network and without logging in. This is the most dangerous combination: attackers can scan reachable devices automatically.
What can happen in the worst case
An attacker could use the vulnerability to
- beliebigen Programmcode auszuführen
Am I affected?
Affected according to the BSI:
- HPE OneView <v11.00
The installed version is usually shown under “Help → About” or in the device’s admin interface.
What helps?
Update to at least:
- HPE OneView v11.00
Is the vulnerability already being exploited?
- CVE-2025-37164: exploited in the wild according to CISA, in the catalogue since 07.01.2026.
Information and sources
- Original BSI advisory (WID)
- GitHub Advisory Database vom 2025-12-16 github.com
- HPE Security Bulletin vom 2025-12-16 support.hpe.com
- PoC vom 2025-12-22 attackerkb.com
- CISA Known Exploited Vulnerabilities Catalog vom 2026-01-07 www.cisa.gov
CVE: CVE-2025-37164
Source: BSI warning and information service (CERT-Bund); CISA. The assessment of the conditions is my reading of the BSI text; the external pages are in their original language.