Approved changes feed: RSS · Atom

cpe:2.3:a:hewlett_packard_enterprise_(hpe):aos-cx:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHewlett Packard Enterprise (Hpe) (b56c5716-cbd3-5c1e-816c-d6416dcfa20e)
ProductAos Cx (350131c1-aa3b-59f0-aebb-45f903e3d745)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-63454 vulnerable 2026-07-29 01:06:19.432018 Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in AOS-CX
HIGH (7.2)
An authenticated path traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable location from the command line interface of the underlying operating system, which could lead to remote code execution.
Published: 2026-07-21T18:02:25.136Z
Updated: 2026-07-24T03:55:52.403Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-63453 vulnerable 2026-07-29 01:06:19.431821 Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX
HIGH (7.2)
Buffer overflow vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities could allow a remote high-privileged user to execute arbitrary code as a privileged user on the underlying operating system.
Published: 2026-07-21T18:02:19.929Z
Updated: 2026-07-24T03:55:51.615Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44880 vulnerable 2026-07-29 00:52:14.893289 Low-Privilege Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX
HIGH (8.8)
A buffer overflow vulnerability was found in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities could allow an remote low-privileged user to execute arbitrary code as a privileged user on the underlying operating system.
Published: 2026-07-21T18:01:52.885Z
Updated: 2026-07-24T03:55:50.739Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-23817 vulnerable 2026-06-08 07:51:16.299621 Unauthenticated Open Redirect allows URL Manipulation in Web Interface
MEDIUM (6.5)
A vulnerability in the web-based management interface of AOS-CX Switches could allow an unauthenticated remote attacker to redirect users to an arbitrary URL.
Published: 2026-03-11T03:14:18.534Z
Updated: 2026-03-11T15:45:06.318Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-23816 vulnerable 2026-06-08 07:51:16.299323 Authenticated Command Injection found in admin AOS-CX CLI command
HIGH (7.2)
A vulnerability in the command line interface of AOS-CX Switches could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.
Published: 2026-03-11T03:13:25.324Z
Updated: 2026-03-11T15:43:49.752Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-23815 vulnerable 2026-06-08 07:51:16.299063 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-23814 vulnerable 2026-06-08 07:51:16.298791 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-23813 vulnerable 2026-06-08 07:51:16.298426 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27080 vulnerable 2026-06-08 07:14:54.113172 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25042 vulnerable 2026-06-08 07:12:50.537821 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25040 vulnerable 2026-06-08 07:12:50.536414 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54010 vulnerable 2026-06-08 06:54:15.852452 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.