7.2
High
CVE-2025-37127 A vulnerability in the cryptographic logic used by HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an…
Description
A vulnerability in the cryptographic logic used by HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to gain shell access. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, potentially leading to unauthorized access and control over the affected systems.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HPE Aruba Networking EdgeConnect SD-WAN Gateway 9.5 | 9.5.0.0 → 9.5.3.6 | No fix stated |
| HPE Aruba Networking EdgeConnect SD-WAN Gateway 9.4 | 9.4.0.0 → 9.4.3.7 | No fix stated |
Other CVEs of HPE Aruba Networking EdgeConnect SD-WAN Gateway
The 9 CVEs of HPE Aruba Networking EdgeConnect SD-WAN Gateway →
CVE-2025-37125
A broken access control vulnerability exists in HPE Aruba Networking EdgeConnect OS (ECOS)
7.5
High
CVE-2025-37123
A vulnerability in the command-line interface of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an…
8.8
High
CVE-2025-37124
A vulnerability in the HPE Aruba Networking SD-WAN Gateways could allow an unauthenticated remote attacker to bypass…
8.6
High
CVE-2025-37128
A vulnerability in the web API of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote…
6.8
Medium