CVE-2025-37130 — Unrestricted Binary allows File Enumeration in Underlying Operating System

CVE-2025-37130

Unrestricted Binary allows File Enumeration in Underlying Operating System PUBLISHED

Description (CNA)

A vulnerability in the command-line interface of EdgeConnect SD-WAN could allow an authenticated attacker to read arbitrary files within the system. Successful exploitation could allow an attacker to read sensitive data from the underlying file system.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / HPE Aruba Networking EdgeConnect SD-WAN Gateway	affected 9.5.0.0 through 9.5.3.6; affected 9.4.0.0 through 9.4.3.7

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04943en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.