Multiple High-Severity Vulnerabilities Found in HPE Aruba Networking EdgeConnect SD-WAN Gateways

According to HPE Aruba Networking, patches addressing multiple high- and medium-severity vulnerabilities have been released for its EdgeConnect SD-WAN Gateways, with successful exploitation potentially leading to privilege escalation, unauthorized access, remote code execution and disruption of critical network services.

The most critical flaws include CVE-2025-37123 (Authenticated Command Injection, CVSS 8.8), CVE-2025-37124 (Unauthenticated Access, CVSS 8.6), CVE-2025-37125 (Broken Access Control, CVSS 7.5), CVE-2025-37126 (Authenticated Remote Code Execution, CVSS 7.2) and CVE-2025-37127 (Authenticated Replay Attack, CVSS 7.2).

Medium-severity issues cited are CVE-2025-37128 (arbitrary process termination, CVSS 6.8), CVE-2025-37129 (CLI script execution, CVSS 6.7), CVE-2025-37130 (arbitrary file enumeration, CVSS 6.5) and CVE-2025-37131 (arbitrary file read, CVSS 4.9). Users are advised to upgrade to EdgeConnect SD-WAN 9.5.4.1 and above or 9.4.4.2 and above, and to implement restrictions on CLI and web interfaces, enable IP allow-lists, use RADIUS or TACACS for authentication, and route management traffic through secure SD-WAN tunnels.