Hpe: >> Arubaos-Cx >> 10.18.0001 Security Vulnerabilities
Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitrary commands as a privileged user on the underlying operating system.
CVSS Score
8.8
EPSS Score
0.004
Published
2026-09-01
Denial-of-service vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation could allow an authenticated user to disrupt the normal operation of a vulnerable system.
CVSS Score
5.3
EPSS Score
0.003
Published
2026-09-01
Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenticated remote attacker could exploit these vulnerabilities by providing specially crafted input from a compromised or hostile authentication server. Successful exploitation could result in a Denial-of-Service or potential remote code execution with elevated privileges.
CVSS Score
8.8
EPSS Score
0.005
Published
2026-09-01
An authenticated user with low-privileged access could submit crafted input through the web-based management interface to execute arbitrary commands on the underlying operating system.
CVSS Score
8.8
EPSS Score
0.004
Published
2026-09-01
Buffer overflow vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities could allow a remote high-privileged user to execute arbitrary code as a privileged user on the underlying operating system.
CVSS Score
7.2
EPSS Score
0.006
Published
2026-07-21
An authenticated path traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable location from the command line interface of the underlying operating system, which could lead to remote code execution.
CVSS Score
7.2
EPSS Score
0.005
Published
2026-07-21
A buffer overflow vulnerability was found in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities could allow an remote low-privileged user to execute arbitrary code as a privileged user on the underlying operating system.
CVSS Score
8.8
EPSS Score
0.008
Published
2026-07-21
Page 4