Advisories · Technology

Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeConnect SD-WAN Gateway.

Every CVE that names Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeConnect SD-WAN Gateway among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-37125 CVE record

CVSS 7.5 High

Broken access control vulnerability in Firewall Configuration Leads to Unauthorized Access to Internal Network Resources
- Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeConnect SD-WAN Gateway
- Broken access control
Not analysed yet 16 Sept 2025
CVE-2025-37123 CVE record

CVSS 8.8 High

Authenticated Command Injection leads to Unauthorized Actions in CLI Interface
- Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeConnect SD-WAN Gateway
- Privilege escalation
Not analysed yet 16 Sept 2025
CVE-2025-37124 CVE record

CVSS 8.6 High

Unauthenticated Access Vulnerability allows Transit Traffic Misrouting in SD-WAN Edge Interface
- Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeConnect SD-WAN Gateway
- CWE-693
Not analysed yet 16 Sept 2025
CVE-2025-37128 CVE record

CVSS 6.8 Medium

Authenticated Arbitrary Process Termination allows potential System Disruption in ECOS
- Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeConnect SD-WAN Gateway
- Privilege escalation
Not analysed yet 16 Sept 2025
CVE-2025-37129 CVE record

CVSS 6.7 Medium

Authenticated Remote Code Execution allows Exploit in Scripts Feature
- Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeConnect SD-WAN Gateway
- Command injection
Not analysed yet 16 Sept 2025
CVE-2025-37127 CVE record

CVSS 7.2 High

Authenticated Replay Attack contains Cryptographic Vulnerability
- Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeConnect SD-WAN Gateway
- Weak cryptography or TLS
Not analysed yet 16 Sept 2025
CVE-2025-37130 CVE record

CVSS 6.5 Medium

Unrestricted Binary allows File Enumeration in Underlying Operating System
- Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeConnect SD-WAN Gateway
- Information disclosure
Not analysed yet 16 Sept 2025
CVE-2025-37126 CVE record

CVSS 7.2 High

Authenticated Remote Code Execution in HPE Aruba Networking EdgeConnect SD-WAN Gateways Command Line Interface
- Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeConnect SD-WAN Gateway
- Command injection
Not analysed yet 16 Sept 2025
CVE-2025-37131 CVE record

CVSS 4.9 Medium

Authenticated Arbitrary File Read allows Data Exposure in CLI Interface
- Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeConnect SD-WAN Gateway
- Broken access control
Not analysed yet 16 Sept 2025