Skip to content
OpenAdvisories
Medium · 5.5 CVE-2025-25041 EUVD-2025-9328GHSA-hc79-964w-vvqg

Arbitrary File Overwrite in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows Client

Published Apr 1, 2025 · Updated Apr 3, 2025 · Assigned by hpe

Description

A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM (root). A successful exploit could allow the creation of a Denial-of-Service (DoS) condition affecting the Microsoft Windows Operating System. This vulnerability does not affect Linux and Android based clients.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA) 4.0.0 – ≤ 4.7.0 —

References