Description
An authenticated path traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable location from the command line interface of the underlying operating system, which could lead to remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hewlett Packard Enterprise (HPE) | AOS-CX | 10.17.0000 – ≤ 10.17.1020, 10.16.0000 – ≤ 10.16.1050, 10.13.0000 – ≤ 10.13.1180, 10.18.0000 – < 10.18.0001 | 10.18.0001 |
Advisories 1
- WID-SEC-2026-2473 Aruba AOS-CX: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 21, 2026