PT-2025-38094 · Hewlett Packardaruba Networking · Hpe Aruba Networking Sd-Wan Gateways

Published 2025-09-16 · Updated 2025-09-17 · CVE-2025-37124

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions HPE Aruba Networking SD-WAN Gateways (affected versions not specified)

Description A vulnerability in the HPE Aruba Networking SD-WAN Gateways could allow an unauthenticated remote attacker to bypass firewall protections. Successful exploitation could allow an attacker to route potentially harmful traffic through the internal network, leading to unauthorized access or disruption of services.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

BDU:2025-11497

CVE-2025-37124

Affected Products

Hpe Aruba Networking Sd-Wan Gateways

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-37124 · Security Note
• https://bdu.fstec.ru/vul/2025-11497 · Security Note
• https://twitter.com/CVEnew/status/1968190759829389627 · Twitter Post
• https://t.me/cveNotify/135605 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1968206352641098083 · Twitter Post
• https://t.me/CVEtracker/32700 · Telegram Post
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04943en_us&docLocale=en_US · Note
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04943en_us&docLocale=en_US · Note