CVE-2025-37124: Unauthenticated Access Vulnerability allows Transit Traffic Misrouting in SD-WAN Edge Interface
A vulnerability in the HPE Aruba Networking SD-WAN Gateways could allow an unauthenticated remote attacker to bypass firewall protections. Successful exploitation could allow an attacker to route potentially harmful traffic through the internal network, leading to unauthorized access or disruption of services.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37124?
CVE-2025-37124 is considered a critical vulnerability due to its potential for unauthorized access and manipulation of network traffic.
How do I fix CVE-2025-37124?
To fix CVE-2025-37124, ensure that you apply the latest security patches provided by HPE for the Aruba Networking SD-WAN Gateways.
Who is affected by CVE-2025-37124?
CVE-2025-37124 affects users of the HPE Aruba Networking SD-WAN Gateways.
What are the risks associated with CVE-2025-37124?
The risks associated with CVE-2025-37124 include unauthorized routing of malicious traffic and potential access to sensitive internal networks.
Can CVE-2025-37124 be exploited remotely?
Yes, CVE-2025-37124 can be exploited by an unauthenticated remote attacker, making it particularly dangerous.