EUVD-2026-84671
GHSA-cm24-7c9v-wfmr
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Unauthenticated remote crafted socket input (AV:N/AC:L/PR:N/UI:N) yields data injection affecting integrity only, with no confidentiality or availability impact (C:N/I:H/A:N).
Primary rating from Vendor (hpe).
CVSS VectorVendor: hpe
Lifecycle Timeline
4DescriptionCVE.org
A vulnerability exists in an Analytics and Location Engine (ALE) component where the impacted process improperly processes incoming socket connections. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input during the connection process. Successful exploitation could result in unauthorized data injection.
AnalysisAI
Unauthenticated data injection in HPE's Analytics and Location Engine (ALE) lets any attacker who can reach the ALE service socket send specially crafted input during connection setup and corrupt the data the component handles. The flaw carries a CVSS 3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) - remote, low complexity, no credentials and no user interaction required, with impact confined to integrity; confidentiality and availability are unaffected. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network reachability to the HPE/Aruba Analytics and Location Engine (ALE) process's listening socket; the attacker sends specially crafted input during the connection process itself. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuinely network-reachable, unauthenticated integrity flaw and should not be dismissed as a paper-high CVSS. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch version is identified in the available intelligence, so the immediate step is to treat the HPE Security Bulletin (https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US) as the authoritative source and apply any fixed ALE build HPE publishes there as soon as it is available. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory every HPE Analytics and Location Engine deployment, confirm which hosts run the ALE service, and determine exactly which network segments can reach its listening socket; where ALE is exposed beyond its intended management or analytics VLAN, restrict access immediately using host and network access control lists so that only authorized collectors, controllers, and administrators can connect. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Default, hard-coded credentials shipped on several administrative and system accounts in HPE's Analytics and Location En
Unauthenticated remote write access to the file system with elevated privileges in HPE Analytics and Location Engine (AL
Information disclosure in HPE ALE management interface allows unauthenticated remote attackers to retrieve sensitive sit
Unauthenticated remote access to an HPE Analytics and Location Engine (ALE) deployment can yield limited sensitive-infor
Command execution in the HPE Analytics and Location Engine (ALE) web interface allows remote, high-privilege authenticat
Root-level file system access in HPE Analytics and Location Engine (ALE) can be obtained by an authenticated administrat
Root-level remote code execution in HPE Analytics and Location Engine (ALE) can be achieved when an attacker first estab
Unauthenticated, network-reachable attacks against HPE Aruba Analytics and Location Engine (ALE) can degrade or knock ou
Unauthenticated information disclosure in the HPE Aruba Analytics and Location Engine (ALE) API allows any remote attack
Same weakness CWE-20 – Improper Input Validation
View allShare
External POC / Exploit Code
Leaving vuln.today