← Database

CVE-2025-25041

MEDIUM CVSS: 5.5 Published: 2025-04-01 Modified: 2026-06-17

Description

A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM (root). A successful exploit could allow the creation of a Denial-of-Service (DoS) condition affecting the Microsoft Windows Operating System. This vulnerability does not affect Linux and Android based clients.

Affected Platforms

Unknown

Weakness Type

CWE-732

References