Medium severity5.5NVD Advisory· Published Apr 1, 2025· Updated Apr 15, 2026

CVE-2025-25041

Description

A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM (root). A successful exploit could allow the creation of a Denial-of-Service (DoS) condition affecting the Microsoft Windows Operating System. This vulnerability does not affect Linux and Android based clients.

Affected products

HPE/Virtual Intranet Access (VIA) clientllm-fuzzy

Patches

Vulnerability mechanics

References

support.hpe.com/hpesc/public/docDisplaynvd

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000