Skip to content
OpenAdvisories
High · 7.2 CVE-2025-37126 EUVD-2025-29668GHSA-3qj9-cmfx-7v94

Authenticated Remote Code Execution in HPE Aruba Networking EdgeConnect SD-WAN Gateways Command Line Interface

Published Sep 16, 2025 · Updated Sep 17, 2025 · Assigned by hpe

Vendor: Hewlett Packard Enterprise (HPE) Product: HPE Aruba Networking EdgeConnect SD-WAN Gateway

Description

A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN Gateways Command Line Interface that allows remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability will result in the ability to execute arbitrary commands as root on the underlying operating system.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeConnect SD-WAN Gateway 9.5.0.0 – ≤ 9.5.3.6, 9.4.0.0 – ≤ 9.4.3.7 —

Advisories 2

References