4.3
CVE-2026-73742
- EPSS 0.15%
- Veröffentlicht 01.09.2026 19:47:35
- Zuletzt bearbeitet 03.09.2026 15:13:09
- Erkennungen
LoginImproper Client Address Validation allows Request Attribution Spoofing in Fabric Composer API Endpoint
A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the source address attributed to their requests. Successful exploitation could allow an attacker to cause inaccurate attribution information to be recorded on the affected system.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Arubanetworks ≫ Fabric Composer Version <= 7.3.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.15% | 0.047 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| HPE | 4.3 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
|
CWE-290 Authentication Bypass by Spoofing
This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us&docLocale=en_US