Aos-cx (Hewlett Packard Enterprise Hpe) - vulnerabilities (CVEs)

46 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-09-01. Vendor: Hewlett Packard Enterprise Hpe.

CVEs of Aos-cx

CVE-2026-73783 - CVSS 4.9 (medium), 2026-09-01: Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could allow an authenticated malicious actor to cause a…
CVE-2026-73782 - CVSS 8.8 (high), 2026-09-01: A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution. Successful exploitation…
CVE-2026-73781 - CVSS 8.4 (high), 2026-09-01: A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS)…
CVE-2026-73780 - CVSS 8.3 (high), 2026-09-01: A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site Request Forgery (CSRF) protection. This…
CVE-2026-73779 - CVSS 8.2 (high), 2026-09-01: Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent…
CVE-2026-73778 - CVSS 9.8 (critical), 2026-09-01: A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote attacker could…
CVE-2026-73777 - CVSS 8.1 (high), 2026-09-01: Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent…
CVE-2026-73776 - CVSS 7.9 (high), 2026-09-01: A signature verification bypass vulnerability exists in the command line interface of AOS-CX. Successful exploitation could allow an authenticated malicious…
CVE-2026-73775 - CVSS 7.7 (high), 2026-09-01: Vulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with low privileges to access sensitive information. A successful…
CVE-2026-73774 - CVSS 7.6 (high), 2026-09-01: A buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated disclosure of sensitive information by…
CVE-2026-73773 - CVSS 7.5 (high), 2026-09-01: An unauthenticated Denial-of-Service (DoS) vulnerability exists in the API endpoint of AOS-CX. Successful exploitation of this vulnerability results in the…
CVE-2026-73772 - CVSS 6.5 (medium), 2026-09-01: Buffer overflow vulnerabilities exist in an underlying service of AOS-CX that could lead to an unauthenticated denial-of-service condition by sending…
CVE-2026-73771 - CVSS 7.5 (high), 2026-09-01: An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing. An unauthenticated remote…
CVE-2026-73770 - CVSS 7.3 (high), 2026-09-01: An authenticated arbitrary file write vulnerability exists in AOS-CX. Successful exploitation could allow an authenticated malicious actor, under specific…
CVE-2026-73768 - CVSS 7.3 (high), 2026-09-01: A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input. Successful exploitation could result…
CVE-2026-73767 - CVSS 7.2 (high), 2026-09-01: Authenticated command injection vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities results in the…
CVE-2026-73766 - CVSS 7.2 (high), 2026-09-01: Command injection vulnerabilities in the API endpoint of AOS-CX could allow an authenticated remote attacker with administrative privileges to inject…
CVE-2026-73765 - CVSS 7.2 (high), 2026-09-01: Authenticated path traversal vulnerabilities exist in API endpoints of AOS-CX. Successful exploitation of these vulnerabilities allows an attacker to write…
CVE-2026-73764 - CVSS 7.1 (high), 2026-09-01: Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent…
CVE-2026-73763 - CVSS 8.8 (high), 2026-09-01: A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands. Successful exploitation…
CVE-2026-73762 - CVSS 6.6 (medium), 2026-09-01: A vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor to circumvent existing access controls. In some cases this…
CVE-2026-73761 - CVSS 6.5 (medium), 2026-09-01: An out-of-bounds read vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated information disclosure by sending a…
CVE-2026-73760 - CVSS 6.5 (medium), 2026-09-01: An authenticated Path Traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to read arbitrary files from…
CVE-2026-73759 - CVSS 6.5 (medium), 2026-09-01: Vulnerabilities in AOS-CX could allow an unauthenticated remote malicious actor to trigger a denial-of-service condition by sending specially crafted packets.…
CVE-2026-73758 - CVSS 6.5 (medium), 2026-09-01: A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low privilege operator user to…
CVE-2026-73757 - CVSS 6.4 (medium), 2026-09-01: A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a server-side request forgery (SSRF)…
CVE-2026-73756 - CVSS 5.9 (medium), 2026-09-01: A vulnerability in an API endpoint of AOS-CX could allow a remote unauthenticated attacker to obtain sensitive information via a man-in-the-middle attack.…
CVE-2026-73755 - CVSS 5.7 (medium), 2026-09-01: A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low-privilege operator user,…
CVE-2026-73754 - CVSS 5.3 (medium), 2026-09-01: Denial-of-service vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation could allow an authenticated user to disrupt the…
CVE-2026-73753 - CVSS 8.8 (high), 2026-09-01: Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitrary commands as a privileged user on…
CVE-2026-73752 - CVSS 8.8 (high), 2026-09-01: An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX. Successful exploitation of this vulnerability allows an attacker to…
CVE-2026-73751 - CVSS 8.8 (high), 2026-09-01: An authenticated user with low-privileged access could submit crafted input through the web-based management interface to execute arbitrary commands on the…
CVE-2026-73750 - CVSS 8.8 (high), 2026-09-01: Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenticated remote attacker could exploit…
CVE-2026-73749 - CVSS 9.8 (critical), 2026-09-01: Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could…
CVE-2026-63454 - CVSS 7.2 (high), 2026-07-21: An authenticated path traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a…
CVE-2026-63453 - CVSS 7.2 (high), 2026-07-21: Buffer overflow vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities could allow a remote…
CVE-2026-44880 - CVSS 8.8 (high), 2026-07-21: A buffer overflow vulnerability was found in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities could allow an remote…
CVE-2026-23816 - CVSS 8.8 (high), 2026-03-11: A vulnerability in the command line interface of AOS-CX Switches could allow an authenticated remote attacker to execute arbitrary commands on the underlying…
CVE-2026-23815 - CVSS 7.2 (high), 2026-03-11: A vulnerability in a custom binary used in AOS-CX Switches' CLI could allow an authenticated remote attacker with high privileges to perform command…
CVE-2026-23817 - CVSS 6.5 (medium), 2026-03-11: A vulnerability in the web-based management interface of AOS-CX Switches could allow an unauthenticated remote attacker to redirect users to an arbitrary URL.
CVE-2026-23813 - CVSS 9.8 (critical), 2026-03-11: A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to…
CVE-2026-23814 - CVSS 8.8 (high), 2026-03-11: A vulnerability in the command parameters of a certain AOS-CX CLI command could allow a low-privilege authenticated remote attacker to inject malicious…
CVE-2025-27080 - CVSS 6 (medium), 2025-03-18: Vulnerabilities in the command line interface of AOS-CX could allow an authenticated remote attacker to expose sensitive information. Successful exploitation…
CVE-2025-25040 - CVSS 3.3 (low), 2025-03-18: A vulnerability has been identified in the port ACL functionality of AOS-CX software running on the HPE Aruba Networking CX 9300 Switch Series only and…
CVE-2025-25042 - CVSS 4.3 (medium), 2025-03-18: A vulnerability in the AOS-CX REST interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful…
CVE-2024-54010 - CVSS 3.4 (low), 2025-01-08: A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists. It could allow an unauthenticated adjacent attacker to…