CVE-2025-37125

Broken access control vulnerability in Firewall Configuration Leads to Unauthorized Access to Internal Network Resources

High · published September 16, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
28.2
In the wild
Unconfirmed
What it is

A broken access control vulnerability exists in HPE Aruba Networking EdgeConnect OS (ECOS). Successful exploitation could allow an attacker to bypass firewall protections, potentially leading to unauthorized traffic being handled improperly

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00357 · 28.2th percentile
Published
2025-09-16T22:32Z
EPSS history
Timeline
  • 16 SEP 22:32Z
    Broken access control vulnerability in Firewall Configuration Leads to Unauthorized Access to Internal Network Resources
    cvelistv5