← back
CVE-2025-37125

Broken access control vulnerability in Firewall Configuration Leads to Unauthorized Access to Internal Network Resources

CVSS 7.5 HIGHEPSS 0.3%CWE-284
A broken access control vulnerability exists in HPE Aruba Networking EdgeConnect OS (ECOS). Successful exploitation could allow an attacker to bypass firewall protections, potentially leading to unauthorized traffic being handled improperly
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Hewlett Packard Enterprise (HPE) · HPE Aruba Networking EdgeConnect SD-WAN Gateway

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04943en_us&docLocale=en_US