CVE-2025-37123

Authenticated Command Injection leads to Unauthorized Actions in CLI Interface

High · published September 16, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
39.6
In the wild
Unconfirmed
What it is

A vulnerability in the command-line interface of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary system commands with root privileges on the underlying operating system.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00467 · 39.6th percentile
Published
2025-09-16T22:30Z
EPSS history
Timeline
  • 16 SEP 22:30Z
    Authenticated Command Injection leads to Unauthorized Actions in CLI Interface
    cvelistv5