CVE-2025-37164

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

December 17, 2025

Last Seen

January 16, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

HPE OneView Software Vulnerability Enables Remote Code Execution81.0

Hewlett Packard Enterprise (HPE) has addressed a critical vulnerability in its OneView software, identified as CVE-2025-37164, which allows attackers to execute arbitrary code remotely without authentication. This flaw affects HPE's infrastructure management software, which is used for managing serv...

RondoDox Botnet Exploits HPE OneView Vulnerability69.0

The RondoDox botnet is exploiting a critical vulnerability in HPE OneView, identified as CVE-2025-37164, which allows for remote code execution. Check Point has reported large-scale automated attacks leveraging this maximum-severity flaw in HPE's data center management platform, affecting various de...

CISA Flags Critical HPE OneView Vulnerability as Actively Exploited54.4

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has identified a critical vulnerability in HPE OneView, tracked as CVE-2025-37164, as being actively exploited in attacks. This flaw affects HPE's infrastructure management software, which is used by IT administrators for managing stor...

RondoDox Botnet Launches Attacks Exploiting HPE OneView Vulnerability53.7

Check Point Research has identified a coordinated exploitation campaign by the RondoDox botnet targeting a critical vulnerability in HPE OneView, designated as CVE-2025-37164. This campaign marks a significant escalation from earlier probing attempts to large-scale automated attacks, affecting organ...