CVE-2025-37123 — Authenticated Command Injection leads to Unauthorized Actions in CLI Interface

CVE-2025-37123

Authenticated Command Injection leads to Unauthorized Actions in CLI Interface PUBLISHED

Description (CNA)

A vulnerability in the command-line interface of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary system commands with root privileges on the underlying operating system.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / HPE Aruba Networking EdgeConnect SD-WAN Gateway	affected 9.5.0.0 through 9.5.3.6; affected 9.4.0.0 through 9.4.3.7

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04943en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.