CVE-2025-37125
BaseFortify
Publication date: 2025-09-16
Last updated on: 2025-09-17
Assigner: Hewlett Packard Enterprise (HPE)
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| hpe | aruba_networking_edgeconnect_os | 3.1 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-284 | The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a broken access control issue in HPE Aruba Networking EdgeConnect OS (ECOS). It allows an attacker to bypass firewall protections, which means the attacker can potentially send unauthorized traffic through the system that should normally be blocked or controlled.
How can this vulnerability impact me? :
The impact of this vulnerability is that an attacker could bypass firewall protections, leading to unauthorized traffic being handled improperly. This could expose your network to malicious traffic or attacks that the firewall is supposed to prevent.