CVEvulnerability

CVE-2026-73749

9.8 CRITICAL Published 2026-09-01 Modified 2026-09-22 Official page ↗
Status
Analyzed
Published
2026-09-01
Last modified
2026-09-22
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-284

Description

Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could result in remote code execution with elevated privileges.

Affected configurations

• hpe arubaos-cx (< 10.10.1181) • hpe arubaos-cx (>= 10.13.0000 < 10.13.1190) • hpe arubaos-cx (>= 10.16.0000 < 10.16.1060) • hpe arubaos-cx (>= 10.17.0000 < 10.17.1030) • hpe arubaos-cx 10.18.0001

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References