Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

AOS-CX — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in AOS-CX, with AI-generated Chinese analysis, references, and POCs.

Vendor: Hewlett Packard Enterprise (HPE)

CVE IDTitleCVSSSeverityPublished
CVE-2026-23817 Unauthenticated Open Redirect allows URL Manipulation in Web Interface 6.5 Medium2026-03-11
CVE-2026-23816 Authenticated Command Injection found in admin AOS-CX CLI command 7.2 High2026-03-11
CVE-2026-23815 Authenticated Command Injection found in AOS-CX Administrative CLI Command 7.2 High2026-03-11
CVE-2026-23814 Authenticated Command Injection found in AOS-CX CLI Command 8.8 High2026-03-11
CVE-2026-23813 Authentication Bypass in Web Interface allows Unauthenticated Admin Password Reset 9.8 Critical2026-03-11
CVE-2025-27080 Authenticated Sensitive Information Disclosure exposes Credentials in AOS-CX Command Line Interface 6.0 Medium2025-03-18
CVE-2025-25042 Authenticated Access Control Vulnerability allows Sensitive Information Disclosure in AOS-CX REST Interface 4.3 Medium2025-03-18
CVE-2025-25040 Failure to Properly Enforce Port ACLs on CPU generated packets in CX 9300 Switches 3.3 Low2025-03-18
CVE-2024-54010 Unauthenticated Traffic Handling Flaw Allows Packet Leakage on HPE Aruba Networking CX 10000 series switches 3.4 Low2025-01-08

All 9 known CVE vulnerabilities affecting AOS-CX with full Chinese analysis, references, and POCs where available.