Hpe Aruba Networking Edgeconnect Sd Wan Gateway
Approved changes feed: RSS · Atom
cpe:2.3:a:hewlett_packard_enterprise_(hpe):hpe_aruba_networking_edgeconnect_sd-wan_gateway:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hewlett Packard Enterprise (Hpe) (b56c5716-cbd3-5c1e-816c-d6416dcfa20e) |
|---|---|
| Product | Hpe Aruba Networking Edgeconnect Sd Wan Gateway (636b4349-4ace-51aa-bc10-53f242dc5161) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-37131 |
vulnerable | 2026-06-08 07:21:02.275869 |
Authenticated Arbitrary File Read allows Data Exposure in CLI Interface
MEDIUM (4.9)
A vulnerability in EdgeConnect SD-WAN ECOS could allow an authenticated remote threat actor with admin privileges to access sensitive unauthorized system files. Under certain conditions, this could lead to exposure and exfiltration of sensitive information.
Published: 2025-09-16T22:17:32.261Z
Updated: 2025-09-17T13:39:02.138Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37130 |
vulnerable | 2026-06-08 07:21:02.275545 |
Unrestricted Binary allows File Enumeration in Underlying Operating System
MEDIUM (6.5)
A vulnerability in the command-line interface of EdgeConnect SD-WAN could allow an authenticated attacker to read arbitrary files within the system. Successful exploitation could allow an attacker to read sensitive data from the underlying file system.
Published: 2025-09-16T22:20:53.184Z
Updated: 2025-09-17T13:57:20.787Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37129 |
vulnerable | 2026-06-08 07:21:02.275324 |
Authenticated Remote Code Execution allows Exploit in Scripts Feature
MEDIUM (6.7)
A vulnerable feature in the command line interface of EdgeConnect SD-WAN could allow an authenticated attacker to exploit built-in script execution capabilities. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system if the feature is enabled without proper security measures.
Published: 2025-09-16T22:22:05.098Z
Updated: 2025-09-17T13:59:59.039Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37128 |
vulnerable | 2026-06-08 07:21:02.274973 |
Authenticated Arbitrary Process Termination allows potential System Disruption in ECOS
MEDIUM (6.8)
A vulnerability in the web API of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to terminate arbitrary running processes. Successful exploitation could allow an attacker to disrupt system operations, potentially resulting in an unstable system state.
Published: 2025-09-16T22:22:57.383Z
Updated: 2025-09-17T14:00:38.971Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37127 |
vulnerable | 2026-06-08 07:21:02.274754 |
Authenticated Replay Attack contains Cryptographic Vulnerability
HIGH (7.2)
A vulnerability in the cryptographic logic used by HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to gain shell access. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, potentially leading to unauthorized access and control over the affected systems.
Published: 2025-09-16T22:22:02.338Z
Updated: 2025-09-17T13:59:02.653Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37126 |
vulnerable | 2026-06-08 07:21:02.274526 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37125 |
vulnerable | 2026-06-08 07:21:02.274295 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37124 |
vulnerable | 2026-06-08 07:21:02.274034 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37123 |
vulnerable | 2026-06-08 07:21:02.273504 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.