CVE-2025-37128

Authenticated Arbitrary Process Termination allows potential System Disruption in ECOS

Medium · published September 16, 2025

CVSS v3.1
6.8
EPSS
0%
Percentile
24.0
In the wild
Unconfirmed
What it is

A vulnerability in the web API of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to terminate arbitrary running processes. Successful exploitation could allow an attacker to disrupt system operations, potentially resulting in an unstable system state.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00323 · 24.0th percentile
Published
2025-09-16T22:22Z
EPSS history
Timeline
  • 16 SEP 22:22Z
    Authenticated Arbitrary Process Termination allows potential System Disruption in ECOS
    cvelistv5