40,000 Hits in 4 Hours: RondoDox Botnet Storms HPE OneView

Check Point Research observed a large-scale automated campaign by the RondoDox botnet exploiting a critical unauthenticated RCE in HPE OneView (CVE-2025-37164), recording over 40,000 exploitation attempts in four hours; researchers identified a distinctive User-Agent and a likely source IP, reported the activity to CISA, and the flaw was added to the Known Exploited Vulnerabilities list, with organizations urged to patch immediately.