8.8
CVE-2026-73782
- EPSS 0.27%
- Veröffentlicht 01.09.2026 20:28:59
- Zuletzt bearbeitet 04.09.2026 14:52:46
- Erkennungen
LoginUnauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CX
A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hpe ≫ Arubaos-cx Version <= 10.10.1180
Hpe ≫ Arubaos-cx Version >= 10.13.0000 <= 10.13.1180
Hpe ≫ Arubaos-cx Version >= 10.16.0000 <= 10.16.1051
Hpe ≫ Arubaos-cx Version >= 10.17.0000 <= 10.17.1021
Hpe ≫ Arubaos-cx Version 10.18.0001
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.27% | 0.187 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| HPE | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-134 Use of Externally-Controlled Format String
The product uses a function that accepts a format string as an argument, but the format string originates from an external source.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us&docLocale=en_US