CNNVD-202601-2399 Information

CNNVD ID

CNNVD-202601-2399

CVE-2025-37182

  • CNNVD Published: 2026-01-14

Description (Chinese)

HPE EdgeConnect SD-WAN Orchestrator是美国HPE公司的一个集中式 SD-WAN 管理平台。可对 WAN 提供完全的可观察性和控制。 HPE EdgeConnect SD-WAN Orchestrator存在安全漏洞,该漏洞源于Web管理界面存在SQL注入,可能导致未经授权的数据访问或数据操纵。

Description (English)

HPE EdgeConnect SD-WAN Orchestrator is a centralized SD-WAN management platform for HPE in the United States. WAN can be fully observable and controlled. HPE EdgeConnect SD-WAN Orchestrator has a security loophole, which stems from the SQL injection of the Web management interface, which may lead to unauthorized data access or manipulation.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

HPE

Published

2026-01-14

Last Modified

2026-02-24

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04992en_us&docLocale=en_US

Patch

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04992en_us&docLocale=en_US

Share on: