EUVD-2023-41335

Malicious code in bioql PyPI...

EUVD-2023-34918

Malicious code in bioql PyPI...

EUVD-2022-40531

Malicious code in bioql PyPI...

EUVD-2022-47475

Malicious code in bioql PyPI...

EUVD-2022-46540

Malicious code in bioql PyPI...

The vulnerability in the web interface of the software-hardware management device for programmatically defined networks, HPE Aruba Networking EdgeConnect SD-WAN, allows a intruder to trigger a service failure.

The vulnerability of the HPE Aruba Networking EdgeConnect SD-WAN software-defined networking management web interface is related to errors in privilege management. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the command-line interface of the software-hardware device for managing program-defined networks from HPE Aruba Networking EdgeConnect SD-WAN allows a attacker to execute arbitrary commands.

The vulnerability of the command-line interface of the HPE Aruba Networking EdgeConnect SD-WAN software-defined networking solution is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the software-hardware solution for managing programmatically defined networks in HPE Aruba Networking EdgeConnect SD-WAN lies in the use of cryptographic algorithms that contain vulnerabilities. This allows a malicious actor to gain unauthorized access to protected information and execute arbitrary commands.

The vulnerability of the software-hardware solution for programmatically defined networks in HPE Aruba Networking EdgeConnect SD-WAN is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow an attacker operating remotely to gain...

The vulnerability of the software-hardware solution for managing programmatically defined networks in HPE Aruba Networking EdgeConnect SD-WAN, related to access control errors, allows a hacker to circumvent existing security restrictions.

The vulnerability of the software-hardware solution for managing programmatically defined networks in HPE Aruba Networking EdgeConnect SD-WAN is related to access control errors. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions from a remote...

The vulnerability of the software-hardware control device for programmatically defined networks in HPE Aruba Networking EdgeConnect SD-WAN lies in its failure to enforce data protection mechanisms. This allows attackers to circumvent existing security restrictions, gain unauthorized access to the device, and trigger service failures.

The vulnerability of the software-hardware solution for managing programmatically defined networks in HPE Aruba Networking EdgeConnect SD-WAN is related to a breach in data protection mechanisms. Exploiting this vulnerability allows an attacker operating remotely to circumvent existing security...

The vulnerability of the command-line interface (CLI) of the software-defined networking management hardware from HPE Aruba Networking EdgeConnect SD-WAN allows a attacker to escalate their privileges and execute arbitrary commands.

The vulnerability of the command-line interface CLI of the software-defined networking management software from HPE Aruba Networking EdgeConnect SD-WAN is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute...

CVE-2025-37125

A broken access control vulnerability exists in HPE Aruba Networking EdgeConnect OS ECOS. Successful exploitation could allow an attacker to bypass firewall protections, potentially leading to unauthorized traffic being handled improperly...

CVE-2025-37128

A vulnerability in the web API of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to terminate arbitrary running processes. Successful exploitation could allow an attacker to disrupt system operations, potentially resulting in an unstable system state...

CVE-2025-37131

A vulnerability in EdgeConnect SD-WAN ECOS could allow an authenticated remote threat actor with admin privileges to access sensitive unauthorized system files. Under certain conditions, this could lead to exposure and exfiltration of sensitive information...

CVE-2025-37129

A vulnerable feature in the command line interface of EdgeConnect SD-WAN could allow an authenticated attacker to exploit built-in script execution capabilities. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system if the feature is...

CVE-2025-37127

A vulnerability in the cryptographic logic used by HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to gain shell access. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, potentially...

CVE-2025-37126

A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN Gateways Command Line Interface that allows remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability will result in the ability to execute arbitrary commands as...

CVE-2025-37130

A vulnerability in the command-line interface of EdgeConnect SD-WAN could allow an authenticated attacker to read arbitrary files within the system. Successful exploitation could allow an attacker to read sensitive data from the underlying file system...

Vulnerabilities fixed in HPE Aruba Networking EdgeConnect SD-WAN Gateways

HPE has fixed vulnerabilities in HPE Aruba Networking EdgeConnect SD-WAN Gateways. The vulnerabilities are in the command-line interface and Web API of the HPE Aruba Networking EdgeConnect SD-WAN Gateways. These vulnerabilities allow authenticated attackers to execute arbitrary system commands wi...

CVE-2025-37131

A vulnerability in EdgeConnect SD-WAN ECOS could allow an authenticated remote threat actor with admin privileges to access sensitive unauthorized system files. Under certain conditions, this could lead to exposure and exfiltration of sensitive information...