Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeConnect SD-WAN Gateway vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Latest Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeConnect SD-WAN Gateway vulnerabilities

CVE-2025-37131 — Authenticated Arbitrary File Read allows Data Exposure in CLI Interface (CVSS 4.9)
CVE-2025-37130 — Unrestricted Binary allows File Enumeration in Underlying Operating System (CVSS 6.5)
CVE-2025-37129 — Authenticated Remote Code Execution allows Exploit in Scripts Feature (CVSS 6.7)
CVE-2025-37128 — Authenticated Arbitrary Process Termination allows potential System Disruption in ECOS (CVSS 6.8)
CVE-2025-37127 — Authenticated Replay Attack contains Cryptographic Vulnerability (CVSS 7.2)
CVE-2025-37126 — Authenticated Remote Code Execution in HPE Aruba Networking EdgeConnect SD-WAN Gateways Command Line Interface (CVSS 7.2)
CVE-2025-37125 — Broken access control vulnerability in Firewall Configuration Leads to Unauthorized Access to Internal Network Resources (CVSS 7.5)
CVE-2025-37124 — Unauthenticated Access Vulnerability allows Transit Traffic Misrouting in SD-WAN Edge Interface (CVSS 8.6)
CVE-2025-37123 — Authenticated Command Injection leads to Unauthorized Actions in CLI Interface (CVSS 8.8)