CVEvulnerability

CVE-2025-37131

4.9 MEDIUM Published 2025-09-16 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2025-09-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.9 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-284

Description

A vulnerability in EdgeConnect SD-WAN ECOS could allow an authenticated remote threat actor with admin privileges to access sensitive unauthorized system files. Under certain conditions, this could lead to exposure and exfiltration of sensitive information.

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References