CVE-2025-37124

Unauthenticated Access Vulnerability allows Transit Traffic Misrouting in SD-WAN Edge Interface

High · published September 16, 2025

CVSS v3.1
8.6
EPSS
0%
Percentile
32.8
In the wild
Unconfirmed
What it is

A vulnerability in the HPE Aruba Networking SD-WAN Gateways could allow an unauthenticated remote attacker to bypass firewall protections. Successful exploitation could allow an attacker to route potentially harmful traffic through the internal network, leading to unauthorized access or disruption of services.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00398 · 32.8th percentile
Published
2025-09-16T22:29Z
EPSS history
Timeline
  • 16 SEP 22:29Z
    Unauthenticated Access Vulnerability allows Transit Traffic Misrouting in SD-WAN Edge Interface
    cvelistv5