The vulnerability of the software-hardware control device for programmatically defined networks in HPE Aruba Networking EdgeConnect SD-WAN lies in its failure to enforce data protection mechanisms. This allows attackers to circumvent existing security restrictions, gain unauthorized access to the device, and trigger service failures.

Aruba EdgeConnect vulnerability where data protection is not enforced, enabling remote attackers to gain unauthorized access and disrupt services.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-37124	16 Sep 202522:43	–	circl
CNNVD	HPE Aruba Networking SD-WAN Gateways 安全漏洞	16 Sep 202500:00	–	cnnvd
CVE	CVE-2025-37124	16 Sep 202522:29	–	cve
Cvelist	CVE-2025-37124 Unauthenticated Access Vulnerability allows Transit Traffic Misrouting in SD-WAN Edge Interface	16 Sep 202522:29	–	cvelist
EUVD	EUVD-2025-29660	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in HPE Aruba Networking EdgeConnect SD-WAN Gateways	18 Sep 202512:02	–	ncsc
NVD	CVE-2025-37124	16 Sep 202523:15	–	nvd
Positive Technologies	PT-2025-38094	16 Sep 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-37124	18 Sep 202523:28	–	redhatcve
Vulnrichment	CVE-2025-37124 Unauthenticated Access Vulnerability allows Transit Traffic Misrouting in SD-WAN Edge Interface	16 Sep 202522:29	–	vulnrichment