6.7
Moyenne
CVE-2025-37129 A vulnerable feature in the command line interface of EdgeConnect SD-WAN could allow an authenticated attacker to…
Description
A vulnerable feature in the command line interface of EdgeConnect SD-WAN could allow an authenticated attacker to exploit built-in script execution capabilities. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system if the feature is enabled without proper security measures.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| HPE Aruba Networking EdgeConnect SD-WAN Gateway 9.5 | 9.5.0.0 → 9.5.3.6 | Pas de correctif indiqué |
| HPE Aruba Networking EdgeConnect SD-WAN Gateway 9.4 | 9.4.0.0 → 9.4.3.7 | Pas de correctif indiqué |
Autres CVE de HPE Aruba Networking EdgeConnect SD-WAN Gateway
Les 9 CVE de HPE Aruba Networking EdgeConnect SD-WAN Gateway →
CVE-2025-37125
A broken access control vulnerability exists in HPE Aruba Networking EdgeConnect OS (ECOS)
7.5
Élevée
CVE-2025-37123
A vulnerability in the command-line interface of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an…
8.8
Élevée
CVE-2025-37124
A vulnerability in the HPE Aruba Networking SD-WAN Gateways could allow an unauthenticated remote attacker to bypass…
8.6
Élevée
CVE-2025-37128
A vulnerability in the web API of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote…
6.8
Moyenne