CVE-2025-25041: Hewlett Packard Enterprise HPE Virtual Intranet Access Via

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM (root). A successful exploit could allow the creation of a Denial-of-Service (DoS) condition affecting the Microsoft Windows Operating System. This vulnerability does not affect Linux and Android based clients.

Affected products

• Hewlett Packard Enterprise HPE Virtual Intranet Access Via: from 4.0.0, up to and including 4.7.0

Published 2025-04-01. Last modified 2026-06-17.