HPE EdgeConnect SD-WAN Orchestrator up to 9.4.4/9.6.0 Web-based Management Interface sql injection

Summaryinfo

A vulnerability was found in HPE EdgeConnect SD-WAN Orchestrator up to 9.4.4/9.6.0. It has been classified as critical. Impacted is an unknown function of the component Web-based Management Interface. Performing a manipulation results in sql injection. This vulnerability is known as CVE-2025-37183. Remote exploitation of the attack is possible. No exploit is available.

Detailsinfo

A vulnerability was found in HPE EdgeConnect SD-WAN Orchestrator up to 9.4.4/9.6.0. It has been classified as critical. This affects an unknown code block of the component Web-based Management Interface. The manipulation with an unknown input leads to a sql injection vulnerability. CWE is classifying the issue as CWE-89. The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to perform SQL injection attacks. Successful exploitation could allow an attacker to execute arbitrary SQL commands on the underlying database, potentially leading to unauthorized data access or data manipulation.

It is possible to read the advisory at support.hpe.com. This vulnerability is uniquely identified as CVE-2025-37183 since 04/16/2025. The exploitability is told to be easy. It is possible to initiate the attack remotely. The exploitation requires an enhanced level of successful authentication. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 01/14/2026). The attack technique deployed by this issue is T1505 according to MITRE ATT&CK.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Network Management Software

Vendor

• HPE

Name

• EdgeConnect SD-WAN Orchestrator

Version

• 9.0
• 9.1
• 9.2
• 9.3
• 9.4
• 9.4.0
• 9.4.1
• 9.4.2
• 9.4.3
• 9.4.4
• 9.5
• 9.6.0

License

• commercial

Website

• Vendor: https://www.hpe.com/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion