Vulnerability in Hewlett Packard Enterprise (HPE) HPE Aruba Networking Edgeconnect Sd-Wan Gateway
CVE-2025-37128
A vulnerability in the web API of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to terminate arbitrary running processes. Successful exploitation could allow an attacker to disrupt system operations, potentially resulting in an unstable system state.
EPSS: 0.003 (21.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H.
Affected products
- Hewlett Packard Enterprise (Hpe) Hpe Aruba Networking Edgeconnect Sd-wan Gateway — versions 9.5.0.0, 9.4.0.0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-37128?
- CVE-2025-37128 is a medium-severity vulnerability in Hewlett Packard Enterprise (HPE) HPE Aruba Networking Edgeconnect Sd-Wan Gateway, classified under CWE-250. CVSS score: 6.8/10. Published 2025-09-16.
- How severe is CVE-2025-37128?
- Medium severity. CVSS v3 base score is 6.8 out of 10.