CVEvulnerability
CVE-2025-37125
7.5 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2025-09-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-284
Description
A broken access control vulnerability exists in HPE Aruba Networking EdgeConnect OS (ECOS). Successful exploitation could allow an attacker to bypass firewall protections, potentially leading to unauthorized traffic being handled improperly
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness