CVE-2025-25041 Arbitrary File Overwrite in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows Client

🗓️ 01 Apr 2025 16:45:53Reported by hpeType

Vulnerability in HPE Aruba VIA client allows file overwrite, potentially causing Denial-of-Service on Windows.

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the HPE Aruba Networking Virtual Intranet Access Client (VIA) VPN service arises from the improper assignment of permissions to critical resources. This allows a perpetrator to trigger a service failure.	14 May 202500:00	–	bdu_fstec
Circl	CVE-2025-25041	1 Apr 202517:32	–	circl
CNNVD	Hewlett Packard Enterprise Aruba Networking Virtual Intranet Access 安全漏洞	1 Apr 202500:00	–	cnnvd
CVE	CVE-2025-25041	1 Apr 202516:45	–	cve
EUVD	EUVD-2025-9328	3 Oct 202520:07	–	euvd
Tenable Nessus	HPE Aruba Networking Virtual Intranet Access (VIA) Client < 4.7.2 Multiple Vulnerabilities (hpesbnw04841)	8 Apr 202500:00	–	nessus
NVD	CVE-2025-25041	1 Apr 202517:15	–	nvd
Positive Technologies	PT-2025-14368 · Hewlett Packard · Hpe Aruba Networking Virtual Intranet Access (Via) Client	1 Apr 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-25041	3 Apr 202517:41	–	redhatcve
Vulnrichment	CVE-2025-25041 Arbitrary File Overwrite in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows Client	1 Apr 202516:45	–	vulnrichment

[
  {
    "defaultStatus": "affected",
    "platforms": [
      "Windows",
      "Linux",
      "MacOS",
      "iOS"
    ],
    "product": "Virtual Intranet Access (VIA)",
    "vendor": "Hewlett Packard Enterprise (HPE)",
    "versions": [
      {
        "lessThanOrEqual": "4.7.0",
        "status": "affected",
        "version": "4.0.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
support	www.support.hpe.com/hpesc/public/docDisplay

01 Apr 2025 16:45Current

CVSS 3.15.5

EPSS0.00116