CVE-2025-37128: medium-severity vulnerability in Hewlett Packard Enterprise (HPE) HPE Aruba…
Authenticated Arbitrary Process Termination allows potential System Disruption in ECOS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.8epss 0.3%
A vulnerability in the web API of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to terminate arbitrary running processes. Successful exploitation could allow an attacker to disrupt system operations, potentially resulting in an unstable system state.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
Related CVEs — Hewlett Packard Enterprise (HPE) HPE Aruba…
In the same product, most dangerous first.
CVE-2025-37126HIGHAuthenticated Remote Code Execution in HPE Aruba Networking EdgeConnect SD-WAN Gateways Command Line InterfaceEPSS 0.6%CVE-2025-37123HIGHAuthenticated Command Injection leads to Unauthorized Actions in CLI InterfaceEPSS 0.5%CVE-2025-37124HIGHUnauthenticated Access Vulnerability allows Transit Traffic Misrouting in SD-WAN Edge InterfaceEPSS 0.4%CVE-2025-37125HIGHBroken access control vulnerability in Firewall Configuration Leads to Unauthorized Access to Internal Network ResourcesEPSS 0.4%CVE-2025-37130MEDIUMUnrestricted Binary allows File Enumeration in Underlying Operating SystemEPSS 0.3%CVE-2025-37131MEDIUMAuthenticated Arbitrary File Read allows Data Exposure in CLI InterfaceEPSS 0.3%