Hewlett Packard Enterprise (Hpe) HPE Aruba Networking AOS CX vulnerabilities

5 vulnerabilities

Known vulnerabilities in Hewlett Packard Enterprise (Hpe) HPE Aruba Networking AOS CX, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.8CVE-2025-37156hewlett packard enterprise (hpe)hpe aruba networking aos-cx+1
EPSS score
0.32%
A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software. Successful exploitation of this vulnerability could allow an attacker with administrative access to execute specific code that renders the switch non-bootable and effectively non-functional.8.8CVE-2025-37158hewlett packard enterprise (hpe)hpe aruba networking aos-cx+1
EPSS score
0.64%
A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an authenticated remote attacker to conduct a Remote Code Execution (RCE) on the affected system.7.3CVE-2025-37159hewlett packard enterprise (hpe)hpe aruba networking aos-cx+1
EPSS score
0.27%
A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an authenticated remote attacker to hijack an active user session. Successful exploitation may enable the attacker to maintain unauthorized access to the session, potentially leading to the view or modification of sensitive configuration data.7.8CVE-2025-37155hewlett packard enterprise (hpe)hpe aruba networking aos-cx+1
EPSS score
0.13%
A vulnerability in the SSH restricted shell interface of the network management services allows improper access control for authenticated read-only users. If successfully exploited, this vulnerability could allow an attacker with read-only privileges to gain administrator access on the affected system.6.5CVE-2025-37160hewlett packard enterprise (hpe)hpe aruba networking aos-cx+1
EPSS score
0.30%
A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation of this vulnerability could enable the attacker to disclose sensitive data.