HPE Aruba Networking EdgeConnect SD-WAN Gateway vulnerabilities

5 known vulnerabilities in HPE Aruba Networking EdgeConnect SD-WAN Gateway from Hewlett Packard Enterprise. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  HPE Aruba Networking EdgeConnect SD-WAN Gateway: Use of a Broken or Risky Cryptographic Algorithm

  CVE-2025-37127Sep 16, 2025Hewlett Packard Enterprise

  A vulnerability in the cryptographic logic used by HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to gain shell access. Successful exploitation could allow an attacker to execute arbitrary commands on the underlyi

• 7.2 High severity

  HPE Aruba Networking EdgeConnect SD-WAN Gateway: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-37126Sep 16, 2025Hewlett Packard Enterprise

  A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN Gateways Command Line Interface that allows remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability will result in the abil

• 7.5 High severity

  HPE Aruba Networking EdgeConnect SD-WAN Gateway: Improper Access Control

  CVE-2025-37125Sep 16, 2025Hewlett Packard Enterprise

  A broken access control vulnerability exists in HPE Aruba Networking EdgeConnect OS (ECOS). Successful exploitation could allow an attacker to bypass firewall protections, potentially leading to unauthorized traffic being handled improperly

• 8.6 High severity

  HPE Aruba Networking EdgeConnect SD-WAN Gateway: Protection Mechanism Failure

  CVE-2025-37124Sep 16, 2025Hewlett Packard Enterprise

  A vulnerability in the HPE Aruba Networking SD-WAN Gateways could allow an unauthenticated remote attacker to bypass firewall protections. Successful exploitation could allow an attacker to route potentially harmful traffic through the internal network, leadin

• 8.8 High severity

  HPE Aruba Networking EdgeConnect SD-WAN Gateway: Improper Privilege Management

  CVE-2025-37123Sep 16, 2025Hewlett Packard Enterprise

  A vulnerability in the command-line interface of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary sy