Hewlett Packard Enterprise (Hpe) Virtual Intranet Access (Via) vulnerabilities

2 vulnerabilities

Known vulnerabilities in Hewlett Packard Enterprise (Hpe) Virtual Intranet Access (Via), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5CVE-2025-25041hewlett packard enterprise (hpe)virtual intranet access (via)
EPSS score
0.14%
A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM (root). A successful exploit could allow the creation of a Denial-of-Service (DoS) condition affecting the Microsoft Windows Operating System. This vulnerability does not affect Linux and Android based clients.7.8CVE-2025-37186hewlett packard enterprise (hpe)virtual intranet access (via)
EPSS score
0.17%
A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking Virtual Intranet Access (VIA) client. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges.