PT-2025-38090 · Vmware · Edgeconnect Sd-Wan

Ncc Group · Published 2025-09-16 · Updated 2025-10-02 · CVE-2025-37130

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions EdgeConnect SD-WAN (affected versions not specified)

Description A vulnerability in the command-line interface of EdgeConnect SD-WAN could allow an authenticated attacker to read arbitrary files within the system. Successful exploitation could allow an attacker to read sensitive data from the underlying file system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Files Accessible to External Parties

Weakness Enumeration

CWE-552

Related Identifiers

BDU:2025-12608

CVE-2025-37130

Affected Products

Edgeconnect Sd-Wan

References · 7

• https://bdu.fstec.ru/vul/2025-12608 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-37130 · Security Note
• https://twitter.com/CVEnew/status/1968190765185577013 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1968190992449765738 · Twitter Post
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04943en_us&docLocale=en_US · Note
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04943en_us&docLocale=en_US · Note
• https://t.me/CVEtracker/32695 · Telegram Post