EUVD-2026-69632
GHSA-q2pr-wxm9-7rvc
Severity by source
AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CLI-local attack requiring low-privileged authentication and user interaction; root command execution yields full CIA compromise of the switch.
Primary rating from Vendor (hpe).
CVSS VectorVendor: hpe
Lifecycle Timeline
3DescriptionCVE.org
A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input. Successful exploitation could result in the execution of arbitrary commands with root privileges.
AnalysisAI
Privilege escalation to root in HPE AOS-CX affects the command line interface, where improper processing of malformed input allows a low-privileged authenticated CLI user to execute arbitrary commands with root-level privileges. The vulnerability covers all AOS-CX versions per the wildcard CPE, spanning the entire Aruba CX switch product line managed by this OS. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires existing authenticated CLI access to the AOS-CX switch with at least low-level privileges (PR:L), meaning the attacker must have valid credentials and CLI login capability on the device. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 score of 7.3 with vector AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H reflects a locally-scoped vulnerability bounded by the need for authenticated CLI access and user interaction, meaningfully constraining the attack surface compared to network-exploitable flaws. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult the HPE security bulletin HPESBNW05134 at https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us&docLocale=en_US for patched AOS-CX versions and upgrade instructions; specific fix version numbers are not confirmed in the available input data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all HPE AOS-CX switches across your Aruba CX infrastructure regardless of version-this vulnerability affects all AOS-CX versions-and identify which systems expose CLI access; immediately audit and restrict low-privileged CLI user accounts to essential personnel only. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Remote code execution in HPE Aruba Networking AOS-CX (the network operating system running on Aruba CX switches) allows
Analysis complete. Key findings for CVE-2026-73778: - **Vulnerability class**: Predictable factory-default password in
Privilege escalation to arbitrary code execution in HPE Aruba Networking AOS-CX switches allows a remote low-privileged,
Remote code execution and denial-of-service vulnerabilities in HPE AOS-CX's authentication module arise from improper ha
Privilege escalation in HPE AOS-CX allows an authenticated low-privileged user to execute arbitrary commands with the pr
OS command injection in HPE AOS-CX's web-based management interface allows any authenticated low-privileged user to exec
Format string exploitation in the HPE AOS-CX command line interface enables unauthenticated, adjacent-network attackers
Unauthenticated arbitrary file write in HPE AOS-CX exposes network switches to full device compromise from adjacent netw
Unauthenticated command injection (CWE-77) in an HPE AOS-CX management component allows an adjacent-network attacker to
A vulnerability in the web-based management interface of AOS-CX could allow a remote authenticated user with read-only p
AOS-CX lacks Anti-CSRF protections in place for state-changing operations. Rated high severity (CVSS 8.8), this vulnerab
AOS-CX lacks Anti-CSRF protections in place for state-changing operations. Rated high severity (CVSS 8.8), this vulnerab
Same weakness CWE-20 – Improper Input Validation
View allShare
External POC / Exploit Code
Leaving vuln.today