Description
A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software. Successful exploitation of this vulnerability could allow an attacker with administrative access to execute specific code that renders the switch non-bootable and effectively non-functional.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hewlett Packard Enterprise (HPE) | HPE Aruba Networking AOS-CX | 10.16.0000 – ≤ 10.16.1000, 10.15.0000 – ≤ 10.15.1020, 10.14.0000 – ≤ 10.14.1050, 10.13.0000 – ≤ 10.13.1090, 10.10.0000 – ≤ 10.10.1160 | — |
Advisories 1
- WID-SEC-2025-2633 Aruba AOS-CX: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 18, 2025