CVE-2025-37123: Authenticated Command Injection leads to Unauthorized Actions in CLI Interface
A vulnerability in the command-line interface of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary system commands with root privileges on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37123?
The severity of CVE-2025-37123 is classified as high due to its potential for privilege escalation.
How do I fix CVE-2025-37123?
To fix CVE-2025-37123, HPE recommends applying the latest firmware updates for the affected HPE Aruba Networking EdgeConnect SD-WAN Gateways.
Who is affected by CVE-2025-37123?
CVE-2025-37123 affects users of HPE Aruba Networking EdgeConnect SD-WAN Gateways who have the command-line interface accessible.
What type of vulnerability is CVE-2025-37123?
CVE-2025-37123 is a privilege escalation vulnerability that allows authenticated remote attackers to execute arbitrary commands.
Can CVE-2025-37123 be exploited remotely?
Yes, CVE-2025-37123 can be exploited remotely by an authenticated attacker.