CISA reports actively exploited Critical HPE OneView flaw
Take action: Make sure all management devices like HPE OneView are isolated from the internet and accessible from trusted networks only. Then plan an update of the HPE OneView.
Learn More
CISA reports active exploitation of HPE OneView flaw that enables remote code execution.
The flaw is tracked as CVE-2025-37164 (CVSS score 10.0) - remote code execution in HPE OneView through version 10.20.
Exposed systems and potential impacts include HPE ProLiant servers and Synergy systems and data center storage and networking controllers
Because management tools sit deep in the network with high privileges, a breach allows full control over hardware and firmware. A public exploit module for Metasploit appeared shortly after HPE released the patch.
Federal agencies must patch these systems by January 28, 2026. The inclusion in the KEV catalog confirms that attackers are actively using these flaws to break into networks.
Organizations should update HPE OneView to version 10.30 or later immediately.
