CVE-2025-37125 — Broken access control vulnerability in Firewall Configuration Leads to Unauthorized Access to Internal Network Resour…

CVE-2025-37125

Broken access control vulnerability in Firewall Configuration Leads to Unauthorized Access to Internal Network Resources PUBLISHED

Description (CNA)

A broken access control vulnerability exists in HPE Aruba Networking EdgeConnect OS (ECOS). Successful exploitation could allow an attacker to bypass firewall protections, potentially leading to unauthorized traffic being handled improperly

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / HPE Aruba Networking EdgeConnect SD-WAN Gateway	affected 9.5.0.0 through 9.5.3.6; affected 9.4.0.0 through 9.4.3.7

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04943en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.