Hewlett Packard Enterprise (Hpe) AOS CX vulnerabilities
46 vulnerabilities
Known vulnerabilities in Hewlett Packard Enterprise (Hpe) AOS CX, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-25040hewlett packard enterprise (hpe)aos-cx+1
EPSS score0.14%
A vulnerability has been identified in the port ACL functionality of AOS-CX software running on the HPE Aruba Networking CX 9300 Switch Series only and affects:
- AOS-CX 10.14.xxxx : All patches
- AOS-CX 10.15.xxxx : 10.15.1000 and below
The vulnerability is specific to traffic originated by the CX 9300 switch platform and could allow an attacker to bypass ACL rules applied to routed ports on egress. As a result, port ACLs are not correctly enforced, which could lead to unauthorized traffic flow and violations of security policies. Egress VLAN ACLs and Routed VLAN ACLs are not affected by this vulnerability.CVE-2025-25042hewlett packard enterprise (hpe)aos-cxEPSS score0.35%
A vulnerability in the AOS-CX REST interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation could allow an attacker to read encrypted credentials of other users on the switch, potentially leading to further unauthorized access or data breaches.CVE-2025-27080hewlett packard enterprise (hpe)aos-cxEPSS score0.20%
Vulnerabilities in the command line interface of AOS-CX could allow an authenticated remote attacker to expose sensitive information. Successful exploitation could allow an attacker to gain unauthorized access to services outside of the impacted switch, potentially leading to lateral movement involving those services.CVE-2024-54010hewlett packard enterprise (hpe)aos-cx+1EPSS score0.24%
A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists. It could allow an unauthenticated adjacent attacker to conduct a packet forwarding attack against the ICMP and UDP protocol. For this attack to be successful an attacker requires a switch configuration that allows packets routing (at layer 3). Configurations that do not allow network traffic routing are not impacted. Successful exploitation could allow an attacker to bypass security policies, potentially leading to unauthorized data exposure.CVE-2026-63454hewlett packard enterprise (hpe)aos-cx+1EPSS score0.87%
An authenticated path traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable location from the command line interface of the underlying operating system, which could lead to remote code execution.CVE-2026-63453hewlett packard enterprise (hpe)aos-cx+1EPSS score0.62%
Buffer overflow vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities could allow a remote high-privileged user to execute arbitrary code as a privileged user on the underlying operating system.CVE-2026-73775hewlett packard enterprise (hpe)aos-cx+1EPSS score0.46%
Vulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-CX.CVE-2026-73754hewlett packard enterprise (hpe)aos-cx+1EPSS score0.34%
Denial-of-service vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation could allow an authenticated user to disrupt the normal operation of a vulnerable system.CVE-2026-73779hewlett packard enterprise (hpe)aos-cx+1EPSS score0.24%
Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could compromise system integrity and further expose sensitive information.CVE-2026-73752hewlett packard enterprise (hpe)aos-cx+1EPSS score0.47%
An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX. Successful exploitation of this vulnerability allows an attacker to write arbitrary files to the underlying operating system, which could lead to remote code execution.CVE-2026-73780hewlett packard enterprise (hpe)aos-cx+1EPSS score0.20%
A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site Request Forgery (CSRF) protection. This could allow a remote unauthenticated attacker to execute arbitrary input against the affected interface if the attacker can convince an authenticated user of the interface to interact with a specially crafted URL.CVE-2026-73763hewlett packard enterprise (hpe)aos-cx+1EPSS score0.47%
A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands. Successful exploitation could result in remote execution of arbitrary commands in the context of the affected utility.CVE-2026-73756hewlett packard enterprise (hpe)aos-cx+1EPSS score0.26%
A vulnerability in an API endpoint of AOS-CX could allow a remote unauthenticated attacker to obtain sensitive information via a man-in-the-middle attack. Successful exploitation allows an attacker to retrieve data which could be used to further compromise the confidentiality of the affected system.CVE-2026-73753hewlett packard enterprise (hpe)aos-cx+1EPSS score0.66%
Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitrary commands as a privileged user on the underlying operating system.CVE-2026-73767hewlett packard enterprise (hpe)aos-cx+1EPSS score1.66%
Authenticated command injection vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.CVE-2026-73764hewlett packard enterprise (hpe)aos-cx+1EPSS score0.31%
Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of affected services.CVE-2026-73771hewlett packard enterprise (hpe)aos-cx+1EPSS score0.47%
An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing. An unauthenticated remote attacker could exploit this vulnerability under specific conditions to bypass authentication controls or exhaust system resources. Successful exploitation could result in unauthorized access or denial of service affecting the management interface.CVE-2026-73770hewlett packard enterprise (hpe)aos-cx+1EPSS score0.24%
An authenticated arbitrary file write vulnerability exists in AOS-CX. Successful exploitation could allow an authenticated malicious actor, under specific conditions outside the attacker's control and following a required action by another user, to create or modify arbitrary files and execute arbitrary commands as a privileged user on the underlying operating system.CVE-2026-73781hewlett packard enterprise (hpe)aos-cx+1EPSS score0.51%
A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.CVE-2026-73751hewlett packard enterprise (hpe)aos-cx+1EPSS score0.66%
An authenticated user with low-privileged access could submit crafted input through the web-based management interface to execute arbitrary commands on the underlying operating system.