PT-2025-38093 · Hewlett Packardaruba Networking · Edgeconnect Sd-Wan Gateways

Nicholas Migliore · Published 2025-09-16 · Updated 2025-09-17 · CVE-2025-37123

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HPE Aruba Networking EdgeConnect SD-WAN Gateways (affected versions not specified)

Description A vulnerability in the command-line interface of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to escalate privileges. Successful exploitation may enable the attacker to execute arbitrary system commands with root privileges on the underlying operating system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2025-11499

CVE-2025-37123

Affected Products

Edgeconnect Sd-Wan Gateways

References · 8

• https://bdu.fstec.ru/vul/2025-11499 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-37123 · Security Note
• https://t.me/CVEtracker/32701 · Telegram Post
• https://twitter.com/CVEnew/status/1968190758604669107 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1968208913288867975 · Twitter Post
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04943en_us&docLocale=en_US · Note
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04943en_us&docLocale=en_US · Note
• https://t.me/cveNotify/135604 · Telegram Post