CVE-2025-25041
Medium
Description
A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM (root). A successful exploit could allow the creation of a Denial-of-Service (DoS) condition affecting the Microsoft Windows Operating System. This vulnerability does not affect Linux and Android based clients.
SeverityMedium
CVSS5.5
Exploit probability—
ProductVirtual Intranet Access (VIA)
PublishedApr 1, 2025
First seenApr 1, 2025
Weakness typeCWE-732CWE-732
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA) | 4.0.0 ≤ v ≤ 4.7.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.