CVE-2025-37130

Unrestricted Binary allows File Enumeration in Underlying Operating System

Medium · published September 16, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
24.2
In the wild
Unconfirmed
What it is

A vulnerability in the command-line interface of EdgeConnect SD-WAN could allow an authenticated attacker to read arbitrary files within the system. Successful exploitation could allow an attacker to read sensitive data from the underlying file system.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00324 · 24.2th percentile
Published
2025-09-16T22:20Z
EPSS history
Timeline
  • 16 SEP 22:20Z
    Unrestricted Binary allows File Enumeration in Underlying Operating System
    cvelistv5