Hewlett Packard Enterprise Aos-Cx vulnerabilities
46 known vulnerabilities affecting hewlett_packard_enterprise/aos-cx.
Total CVEs
46
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH27MEDIUM14LOW2
Vulnerabilities
Page 3 of 3
CVE-2026-73754P4MEDIUMCVSS 5.3≥ 10.18.0000, ≤ 10.18.0001≥ 10.17.0000, ≤ 10.17.1021+3 more2026-09-01
CVE-2026-73754 [MEDIUM] CWE-400 CVE-2026-73754: Denial-of-service vulnerabilities exist in the command line interface of AOS-CX. Successful exploita
Denial-of-service vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation could allow an authenticated user to disrupt the normal operation of a vulnerable system.
nvd
CVE-2026-73783P4MEDIUMCVSS 4.9≥ 10.18.0000, ≤ 10.18.0001≥ 10.17.0000, ≤ 10.17.1021+3 more2026-09-01
CVE-2026-73783 [MEDIUM] CWE-121 CVE-2026-73783: Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could all
Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could allow an authenticated malicious actor to cause a denial-of-service condition on the affected system.
nvd
CVE-2025-27080P4MEDIUMCVSS 6.0≥ 10.10.0000, ≤ <=10.10.1140≥ 10.13.0000, ≤ <=10.13.1070+2 more2025-03-18
CVE-2025-27080 [MEDIUM] CWE-359 CVE-2025-27080: Vulnerabilities in the command line interface of AOS-CX could allow an authenticated remote attacker
Vulnerabilities in the command line interface of AOS-CX could allow an authenticated remote attacker to expose sensitive information. Successful exploitation could allow an attacker to gain unauthorized access to services outside of the impacted switch, potentially leading to lateral movement involving those services.
nvd
CVE-2025-25042P4MEDIUMCVSS 4.3≥ 10.10.0000, ≤ <=10.10.1140≥ 10.13.0000, ≤ <=10.13.1070+2 more2025-03-18
CVE-2025-25042 [MEDIUM] CWE-359 CVE-2025-25042: A vulnerability in the AOS-CX REST interface could allow an authenticated remote attacker with low p
A vulnerability in the AOS-CX REST interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation could allow an attacker to read encrypted credentials of other users on the switch, potentially leading to further unauthorized access or data breaches.
nvd
CVE-2024-54010P4LOWCVSS 3.4≥ Version 10.10.0000: 10.10.1140 and below, ≤ <=10.10.1140≥ Version 10.13.0000: 10.13.1060 and below, ≤ <=10.13.1060+2 more2025-01-08
CVE-2024-54010 [LOW] CWE-863 CVE-2024-54010: A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists.
A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists. It could allow an unauthenticated adjacent attacker to conduct a packet forwarding attack against the ICMP and UDP protocol. For this attack to be successful an attacker requires a switch configuration that allows packets routing (at layer 3). Configuration
nvd
CVE-2025-25040P4LOWCVSS 3.3≥ 10.14.0000, ≤ <=10.14.1040≥ 10.15.0000, ≤ <=10.15.10002025-03-18
CVE-2025-25040 [LOW] CWE-863 CVE-2025-25040: A vulnerability has been identified in the port ACL functionality of AOS-CX software running on the
A vulnerability has been identified in the port ACL functionality of AOS-CX software running on the HPE Aruba Networking CX 9300 Switch Series only and affects:
- AOS-CX 10.14.xxxx : All patches
- AOS-CX 10.15.xxxx : 10.15.1000 and below
The vulnerability is specific to traffic originated by the CX 9300 switch platform and could allow an attacker to by
nvd
← Previous3 / 3