Description
A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an authenticated remote attacker to conduct a Remote Code Execution (RCE) on the affected system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hewlett Packard Enterprise (HPE) | HPE Aruba Networking AOS-CX | 10.16.0000 – ≤ 10.16.1000, 10.15.0000 – ≤ 10.15.1020, 10.14.0000 – ≤ 10.14.1050, 10.13.0000 – ≤ 10.13.1090, 10.10.0000 – ≤ 10.10.1160 | — |
Advisories 1
- WID-SEC-2025-2633 Aruba AOS-CX: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 18, 2025