CVE-2025-37182: Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to perform SQL injection attacks. Successful exploitation could allow an attacker to execute arbitrary SQL commands on the underlying database, potentially leading to unauthorized data access or data manipulation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37182?
The severity of CVE-2025-37182 is critical due to its potential for SQL injection attacks that can compromise the database and application integrity.
How do I fix CVE-2025-37182?
To fix CVE-2025-37182, update to the latest version of Silver Peak EdgeConnect SD-WAN Orchestrator that addresses the SQL injection vulnerability.
Who is affected by CVE-2025-37182?
CVE-2025-37182 affects users of the Silver Peak EdgeConnect SD-WAN Orchestrator, specifically those utilizing its web-based management interface.
What exploitation methods are available for CVE-2025-37182?
Exploitation of CVE-2025-37182 can be performed by authenticated remote attackers using specially crafted SQL queries.
What are the potential impacts of CVE-2025-37182?
The potential impacts of CVE-2025-37182 include unauthorized access to sensitive information, modification of database records, and complete compromise of the application.