PT-2025-38091 · Vmware · Edgeconnect Sd-Wan Ecos

Ncc Group · Published 2025-09-16 · Updated 2025-09-17 · CVE-2025-37131

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions EdgeConnect SD-WAN ECOS (affected versions not specified)

Description A vulnerability in EdgeConnect SD-WAN ECOS could allow an authenticated remote threat actor with admin privileges to access sensitive unauthorized system files. This could lead to exposure and exfiltration of sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2025-12607

CVE-2025-37131

Affected Products

Edgeconnect Sd-Wan Ecos

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-37131 · Security Note
• https://bdu.fstec.ru/vul/2025-12607 · Security Note
• https://twitter.com/CVEnew/status/1968190767093916111 · Twitter Post
• https://vuldb.com/?id.324595 · Note
• https://twitter.com/VulmonFeeds/status/1968188432280146400 · Twitter Post
• https://t.me/CVEtracker/32693 · Telegram Post
• https://cybersecurity-help.cz/vulnerabilities/115745 · Note
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04943en_us&docLocale=en_US · Note
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04943en_us&docLocale=en_US · Note