{"uuid": "e7f7e20f-e922-4fd9-b5db-e00eb9f27e2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-37164", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/hpe_oneview_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Nguyen Quoc Khanh\", \"remmons-r7\", \"sfewer-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated RCE vulnerability, CVE-2025-37164, against Hewlett Packard Enterprise\\n          (HPE) OneView. All versions below 11.00 are vulnerable (so long as the vendor supplied hotfix has not been\\n          applied), however some VM product versions do not enable the vulnerable \\\"ID Pools\\\" endpoint, and are not\\n          exploitable.\", \"disclosure_date\": \"2025-12-16\", \"fullname\": \"exploit/linux/http/hpe_oneview_rce\", \"is_install_path\": true, \"mod_time\": \"2025-12-19 15:38:43 +0000\", \"name\": \"HPE OneView unauthenticated RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/hpe_oneview_rce.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/hpe_oneview_rce\", \"references\": [\"CVE-2025-37164\", \"URL-https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04985en_us&docLocale=en_US\", \"URL-https://www.rapid7.com/blog/post/etr-cve-2025-37164-critical-unauthenticated-rce-affecting-hewlett-packard-enterprise-oneview/\", \"URL-https://attackerkb.com/topics/ixWdbDvjwX/cve-2025-37164/rapid7-analysis\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Default\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:37.655458Z"}