CVE-2025-37127

Authenticated Replay Attack contains Cryptographic Vulnerability

High · published September 16, 2025

CVSS v3.1
7.2
EPSS
0%
Percentile
2.7
In the wild
Unconfirmed
What it is

A vulnerability in the cryptographic logic used by HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to gain shell access. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, potentially leading to unauthorized access and control over the affected systems.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00136 · 2.7th percentile
Published
2025-09-16T22:22Z
EPSS history
Timeline
  • 16 SEP 22:22Z
    Authenticated Replay Attack contains Cryptographic Vulnerability
    cvelistv5