{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "notes": [ { "category": "general", "text": "Complete information on reporting security vulnerabilities in HPE Networking products and obtaining assistance with security incidents is available at: https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=a00100637en_us", "title": "SIRT Security Procedures" }, { "category": "general", "text": "HPE Networking has released patches for the HPE Networking Wireless Operating Systems (AOS-8 and AOS-10) for Mobility Conductors, Controllers, Gateways, and Access Points that address multiple security vulnerabilities.", "title": "Summary" } ], "publisher": { "category": "vendor", "contact_details": "networking-psirt(at)hpe.com", "name": "HPE Networking", "namespace": "https://www.hpe.com/support/security-response-policy" }, "references": [ { "category": "self", "summary": "HPESBNW05162 HPE Networking Security Advisory", "url": "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=HPESBNW05162" } ], "title": "Multiple Vulnerabilities in HPE Networking Wireless Operating Systems (AOS-8 and AOS-10) for Mobility Conductors, Controllers, Gateways, and Access Points.", "tracking": { "current_release_date": "2026-10-22T16:00:00.000Z", "generator": { "date": "2026-10-22T15:01:42.148Z", "engine": { "name": "Secvisogram", "version": "2.6.16" } }, "id": "HPESBNW05162", "initial_release_date": "2026-10-22T16:00:00.000Z", "revision_history": [ { "date": "2026-10-22T16:00:00.000Z", "number": "1", "summary": "Initial release" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "AOS-10.8.1.2", "product": { "name": "AOS-10.8.1.2", "product_id": "AOS-10.8.1.2" } }, { "category": "product_version", "name": "AOS-10.7.2.7", "product": { "name": "AOS-10.7.2.7", "product_id": "AOS-10.7.2.7" } }, { "category": "product_version", "name": "AOS-10.4.1.14", "product": { "name": "AOS-10.4.1.14", "product_id": "AOS-10.4.1.14" } } ], "category": "product_version", "name": "Fixed" }, { "branches": [ { "category": "product_version_range", "name": ">=10.8.0.0|<=10.8.1.1", "product": { "name": ">=10.8.0.0|<=10.8.1.1", "product_id": ">=10.8.0.0|<=10.8.1.1" } }, { "category": "product_version_range", "name": ">=10.6.0.0|<=10.7.2.6", "product": { "name": ">=10.6.0.0|<=10.7.2.6", "product_id": ">=10.6.0.0|<=10.7.2.6" } }, { "category": "product_version_range", "name": ">=10.3.0.0|<=10.4.1.13", "product": { "name": ">=10.3.0.0|<=10.4.1.13", "product_id": ">=10.3.0.0|<=10.4.1.13" } } ], "category": "product_version_range", "name": "Affected" } ], "category": "product_family", "name": "AOS-10" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "AOS-8.13.3.1", "product": { "name": "AOS-8.13.3.1", "product_id": "AOS-8.13.3.1" } }, { "category": "product_version", "name": "AOS-8.10.0.24", "product": { "name": "AOS-8.10.0.24", "product_id": "AOS-8.10.0.24" } } ], "category": "product_version", "name": "Fixed" }, { "branches": [ { "category": "product_version_range", "name": ">=8.12.0.0|<=8.13.3.0", "product": { "name": ">=8.12.0.0|<=8.13.3.0", "product_id": ">=8.12.0.0|<=8.13.3.0" } }, { "category": "product_version_range", "name": ">=8.10.0.0|<=8.10.0.23", "product": { "name": ">=8.10.0.0|<=8.10.0.23", "product_id": ">=8.10.0.0|<=8.10.0.23" } } ], "category": "product_version_range", "name": "Affected" } ], "category": "product_family", "name": "AOS-8" } ], "category": "vendor", "name": "HPE Networking" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79844", "notes": [ { "category": "general", "text": "Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 10, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 10, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 10, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Authentication Bypass Leading to Remote Code Execution in AOS-10" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79845", "notes": [ { "category": "general", "text": "Vulnerabilities in the PAPI protocol of AOS-10 could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 10, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 10, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 10, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Authentication Bypass Vulnerabilities in the PAPI Protocol of AOS-10 allow Unauthorized Access and Modification of Sensitive Data" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79846", "notes": [ { "category": "general", "text": "Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 10, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 10, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 10, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Unauthenticated Command Injection Vulnerabilities in AOS-8" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79847", "notes": [ { "category": "general", "text": "Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code execution by sending specially crafted packets to the affected interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 10, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 10, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 10, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10" }, { "acknowledgments": [ { "organization": "HPE Networking" }, { "names": [ "moonv" ], "organization": "HPE Networking's Bug Bounty program (Bugcrowd)" } ], "cve": "CVE-2026-79848", "notes": [ { "category": "general", "text": "Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 10, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 10, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 10, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8" }, { "acknowledgments": [ { "organization": "HPE Networking" }, { "names": [ "moonv" ], "organization": "HPE Networking's Bug Bounty program (Bugcrowd)" } ], "cve": "CVE-2026-79849", "notes": [ { "category": "general", "text": "Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 10, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 10, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 10, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79850", "notes": [ { "category": "general", "text": "Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to bypass existing authentication controls and run arbitrary commands on the underlying host. Successful exploitation could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 10, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 10, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 10, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Authentication Bypass Leading to Remote Code Execution in AOS-8" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79851", "notes": [ { "category": "general", "text": "Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete system compromise.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 10, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 10, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 10, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10" }, { "acknowledgments": [ { "names": [ "moonv" ], "organization": "HPE Networking's Bug Bounty program (Bugcrowd)" } ], "cve": "CVE-2026-79852", "notes": [ { "category": "general", "text": "A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14", "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13", ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14", "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13", ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.8, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 9.8, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13", ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interface" }, { "acknowledgments": [ { "names": [ "moonv" ], "organization": "HPE Networking's Bug Bounty program (Bugcrowd)" } ], "cve": "CVE-2026-79853", "notes": [ { "category": "general", "text": "Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to obtain sensitive information from the affected system. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.8, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 9.8, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Unauthenticated Sensitive Information Disclosure leads to Remote Code Execution in AOS-10" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79854", "notes": [ { "category": "general", "text": "A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS-10 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.8, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 9.8, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79855", "notes": [ { "category": "general", "text": "An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation allows an attacker to gain administrative privileges leading to complete compromise of the AOS-8 host.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.8, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 9.8, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79856", "notes": [ { "category": "general", "text": "A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.8, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 9.8, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79857", "notes": [ { "category": "general", "text": "There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets to the affected UDP port. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.8, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 9.8, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79858", "notes": [ { "category": "general", "text": "An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to obtain and modify sensitive information in the underlying database and to interrupt the normal operation of the affected service.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.8, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 9.8, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79859", "notes": [ { "category": "general", "text": "Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead to unauthenticated remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.8, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 9.8, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79860", "notes": [ { "category": "general", "text": "Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port 8211. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.8, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 9.8, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79861", "notes": [ { "category": "general", "text": "There is a command injection vulnerability in AOS-10 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.8, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 9.8, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10" }, { "acknowledgments": [ { "organization": "HPE Networking" }, { "names": [ "zzcentury" ], "organization": "HPE Networking's Bug Bounty program (Bugcrowd)" } ], "cve": "CVE-2026-79862", "notes": [ { "category": "general", "text": "Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially crafted data to the affected interface. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14", "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13", ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14", "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13", ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.6, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.7, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 9.6, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13", ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution" }, { "acknowledgments": [ { "organization": "HPE Networking" }, { "names": [ "zzcentury" ], "organization": "HPE Networking's Bug Bounty program (Bugcrowd)" } ], "cve": "CVE-2026-79863", "notes": [ { "category": "general", "text": "Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially crafted data to the affected interface. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14", "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13", ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14", "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13", ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.6, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.7, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 9.6, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13", ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79864", "notes": [ { "category": "general", "text": "Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an unauthenticated adjacent attacker to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.6, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.7, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 9.6, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Unauthenticated Adjacent Command Injection Vulnerability in AOS-10" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79865", "notes": [ { "category": "general", "text": "A memory corruption vulnerability in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.6, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.7, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 9.6, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Unauthenticated Adjacent Memory Corruption Vulnerability leads to Remote Code Execution in AOS-10" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79866", "notes": [ { "category": "general", "text": "An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation of this vulnerability could allow an unauthenticated adjacent attacker to read, modify, and delete files on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.6, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.7, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 9.6, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Unauthenticated Adjacent Path Traversal Vulnerability leads to Filesystem Compromise in AOS-8" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79867", "notes": [ { "category": "general", "text": "Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run arbitrary commands on the underlying host. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.6, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.7, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 9.6, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Authentication Bypass Leading to Remote Code Execution in AOS-8" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79868", "notes": [ { "category": "general", "text": "Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data, leading to complete compromise of the affected system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.6, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.7, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 9.6, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Authentication Bypass Vulnerabilities lead to Complete System Compromise in AOS-8" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79869", "notes": [ { "category": "general", "text": "Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.6, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.7, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 9.6, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Authentication Bypass Leading to Remote Code Execution in AOS-10" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79870", "notes": [ { "category": "general", "text": "An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, access or manipulate sensitive data, and disrupt network operations.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.6, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.7, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 9.6, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Authentication Bypass leads to Unauthorized Access in AOS-8" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79871", "notes": [ { "category": "general", "text": "A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an unauthenticated remote attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.6, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.7, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 9.6, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Unauthenticated Sensitive Information Disclosure in the Command Line Interface of AOS-10" }, { "acknowledgments": [ { "names": [ "m0omo0d" ], "organization": "HPE Networking's Bug Bounty program (Bugcrowd)" } ], "cve": "CVE-2026-79872", "notes": [ { "category": "general", "text": "A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated remote code execution by an unauthenticated remote attacker. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14", "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13", ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14", "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13", ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 9.4, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.4, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 9.4, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13", ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Unauthenticated Buffer Overflow Vulnerability allows Remote Code Execution in AOS-10 and AOS-8" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79873", "notes": [ { "category": "general", "text": "Authentication bypass vulnerabilities in the PAPI protocol of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data on affected devices.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.3, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 9.3, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Unauthenticated Adjacent Authentication Bypasses in the PAPI Protocol of AOS-10 Leads to Unauthorized Administrative Access" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79874", "notes": [ { "category": "general", "text": "An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.3, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 9.3, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Authentication Bypass in the API allows Administrative Access of AOS-10" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79875", "notes": [ { "category": "general", "text": "A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.3, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 9.3, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Authentication Bypass in the PAPI Protocol of AOS-8 Allows Unauthorized Administrative Access" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79876", "notes": [ { "category": "general", "text": "A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10, or to interrupt the normal operation of the affected service.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.3, "environmentalSeverity": "CRITICAL", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 9.3, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Unauthenticated Adjacent Sensitive Information Disclosure in AOS-10 Wi-Fi Frame Processing" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79877", "notes": [ { "category": "general", "text": "A remote code execution vulnerability in the underlying operating system of AOS-10 could allow an unauthenticated adjacent attacker to execute arbitrary code on an affected device. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system leading to complete system compromise.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "environmentalScore": 8.8, "environmentalSeverity": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 8.8, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Unauthenticated Adjacent Remote Code Execution Vulnerability in AOS-10" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79878", "notes": [ { "category": "general", "text": "A command injection vulnerability in the AOS-8 command line interface accessed by the PAPI protocol could lead to unauthenticated remote code execution by an adjacent attacker sending specially crafted PAPI packets destined to the PAPI UDP port 8211. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "environmentalScore": 8.8, "environmentalSeverity": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 8.8, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Unauthenticated Adjacent Command Injection Vulnerability in the AOS-8 Command Line Interface Accessed by the PAPI Protocol" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79879", "notes": [ { "category": "general", "text": "Memory corruption vulnerabilities in the affected interface of AOS-10 could lead to remote code execution by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "environmentalScore": 8.8, "environmentalSeverity": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 8.8, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Unauthenticated Adjacent Memory Corruption Vulnerabilities lead to Remote Code Execution in AOS-10" }, { "acknowledgments": [ { "names": [ "m0omo0d" ], "organization": "HPE Networking's Bug Bounty program (Bugcrowd)" } ], "cve": "CVE-2026-79880", "notes": [ { "category": "general", "text": "A vulnerability in the command line interface of AOS-8 could allow an authenticated remote attacker with high privileges to conduct a server-side request forgery (SSRF) attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.7, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "environmentalScore": 8.7, "environmentalSeverity": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "temporalScore": 8.7, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Authenticated Server-Side Request Forgery leads to Remote Code Execution in AOS-8" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79881", "notes": [ { "category": "general", "text": "An authentication bypass vulnerability in the underlying operating system of AOS-8 could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system leading to complete system compromise.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.6, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "environmentalScore": 9.7, "environmentalSeverity": "CRITICAL", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 9.6, "temporalSeverity": "CRITICAL", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Authentication Bypass Leading to Remote Code Execution in AOS-8" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79882", "notes": [ { "category": "general", "text": "There is a command injection vulnerability in the PAPI protocol of AOS-10 that could lead to unauthenticated remote code execution by an adjacent attacker sending specially crafted packets. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "environmentalScore": 8.4, "environmentalSeverity": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 8.3, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Unauthenticated Adjacent Command Injection Vulnerability in the PAPI Protocol of AOS-10" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79883", "notes": [ { "category": "general", "text": "A buffer overflow vulnerability in the PAPI protocol of HPE Networking AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10, and to interrupt the normal operation of the affected service.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "environmentalScore": 8.3, "environmentalSeverity": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 8.3, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Unauthenticated Adjacent Buffer Overflow Vulnerability in the PAPI Protocol leads to Sensitive Information Disclosure in AOS-10" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79884", "notes": [ { "category": "general", "text": "A vulnerability in the web-based management interface of AOS-8 could allow an unauthenticated adjacent attacker to bypass existing authentication controls and access sensitive information. Successful exploitation could allow an attacker to gain access to some data in a cleartext format possibly exposing other network infrastructure to further compromise.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "environmentalScore": 8.2, "environmentalSeverity": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "temporalScore": 8.2, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Authentication Bypass leads to Sensitive Information Disclosure in AOS-8" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79885", "notes": [ { "category": "general", "text": "An unauthenticated file write vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to make limited modifications to files on the affected system and to disrupt the availability of the affected service.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "environmentalScore": 8.2, "environmentalSeverity": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 8.2, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Unauthenticated File Write Vulnerability leads to Denial-of-Service in AOS-8" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79886", "notes": [ { "category": "general", "text": "An unauthenticated buffer overflow vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected service on the controller, with a limited impact to its integrity.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "environmentalScore": 8.2, "environmentalSeverity": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 8.2, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8" }, { "acknowledgments": [ { "names": [ "Diego Gomez", "David Kierznowski" ], "organization": "HPE Networking's Bug Bounty program (Bugcrowd)" } ], "cve": "CVE-2026-79887", "notes": [ { "category": "general", "text": "A vulnerability in the web interface of AOS-8 could allow an unauthenticated remote attacker to achieve remote code execution. Successful exploitation could lead to complete device control, enabling interception of network traffic and potential compromise of connected systems.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "environmentalScore": 8.1, "environmentalSeverity": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 8.1, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Authentication Bypass in Web Interface of AOS-8 allows Remote Command Execution (RCE)" }, { "acknowledgments": [ { "names": [ "Diego Gomez", "David Kierznowski" ], "organization": "HPE Networking's Bug Bounty program (Bugcrowd)" } ], "cve": "CVE-2026-79888", "notes": [ { "category": "general", "text": "A vulnerability in a certain web interface endpoint of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, leading to complete system compromise.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "environmentalScore": 8.1, "environmentalSeverity": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 8.1, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Unauthenticated Buffer Overflow allows Remote Code Execution in web interface" }, { "acknowledgments": [ { "names": [ "Diego Gomez", "David Kierznowski" ], "organization": "HPE Networking's Bug Bounty program (Bugcrowd)" } ], "cve": "CVE-2026-79889", "notes": [ { "category": "general", "text": "Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow by using specially crafted requests. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, leading to complete system compromise.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "environmentalScore": 8.1, "environmentalSeverity": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 8.1, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Multiple Unauthenticated Buffer Overflow vulnerabilities in AOS-8 Web Interface result in Remote Code Execution" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79890", "notes": [ { "category": "general", "text": "There are command injection vulnerabilities in AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "environmentalScore": 8.1, "environmentalSeverity": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 8.1, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Unauthenticated Command Injection Vulnerabilities in AOS-8 Accessed by the PAPI Protocol" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79891", "notes": [ { "category": "general", "text": "A buffer overflow vulnerability exists in the command line interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system leading to complete system compromise.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "environmentalScore": 8.1, "environmentalSeverity": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 8.1, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79892", "notes": [ { "category": "general", "text": "A memory corruption vulnerability exists in AOS-8 that could allow an authenticated local attacker to execute arbitrary code. Successful exploitation could allow the attacker to execute arbitrary code as a privileged user on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "environmentalScore": 7.8, "environmentalSeverity": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "temporalScore": 7.8, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Authenticated Local Memory Corruption Vulnerability leads to Arbitrary Code Execution in AOS-8" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79893", "notes": [ { "category": "general", "text": "Memory corruption vulnerabilities in AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected service.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "environmentalScore": 7.5, "environmentalSeverity": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 7.5, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Unauthenticated Memory Corruption Vulnerabilities lead to Denial-of-Service in AOS-10" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79894", "notes": [ { "category": "general", "text": "An unauthenticated Denial-of-Service (DoS) vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation of this vulnerability results in the ability to disrupt the availability of the affected interface.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "environmentalScore": 7.5, "environmentalSeverity": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 7.5, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Unauthenticated Denial-of-Service (DoS) Vulnerability in the PAPI Protocol of AOS-8" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79895", "notes": [ { "category": "general", "text": "Vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected interface.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "environmentalScore": 7.5, "environmentalSeverity": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 7.5, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Unauthenticated Remote Denial-of-Service (DoS) Vulnerabilities in AOS-10" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-79955", "notes": [ { "category": "general", "text": "An unauthenticated memory corruption vulnerability exists in a service accessed via the PAPI protocol in AOS-8 that could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected service.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "environmentalScore": 7.5, "environmentalSeverity": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 7.5, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Unauthenticated Memory Corruption Vulnerability leads to Denial-of-Service in AOS-8" }, { "acknowledgments": [ { "names": [ "LIUPENG" ], "organization": "HPE Networking's Bug Bounty program (Bugcrowd)" } ], "cve": "CVE-2026-79956", "notes": [ { "category": "general", "text": "A vulnerability in the CLI command handling of the AOS-8 web interface could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system. Successful exploitation could allow an attacker to run unauthorized commands on the system, potentially leading to system compromise.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "environmentalScore": 7.2, "environmentalSeverity": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "temporalScore": 7.2, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Improper Sanitization leads to Command Injection in AOS-8 Web Interface" }, { "acknowledgments": [ { "names": [ "moonv" ], "organization": "HPE Networking's Bug Bounty program (Bugcrowd)" } ], "cve": "CVE-2026-95704", "notes": [ { "category": "general", "text": "A vulnerability in the web-based management interface of wireless network management systems could allow an authenticated remote attacker to execute remote code. Successful exploitation could enable an attacker to execute arbitrary commands on the underlying operating system, potentially compromising system integrity and data security.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14", "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13", ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14", "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13", ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "environmentalScore": 7.2, "environmentalSeverity": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "temporalScore": 7.2, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13", ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Authenticated Remote Code Execution allows Unauthorized System Control in Wireless Network Management Interface" }, { "acknowledgments": [ { "names": [ "Michael Messner", "Benedikt Kuehne", "Caio Adler Goncalves Farias" ], "organization": "Siemens Energy" } ], "cve": "CVE-2026-95705", "notes": [ { "category": "general", "text": "Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with the privileges of the impacted mechanism on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "environmentalScore": 7.2, "environmentalSeverity": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "temporalScore": 7.2, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Authenticated Command Injection Vulnerabilities in AOS-8" }, { "acknowledgments": [ { "names": [ "moonv" ], "organization": "HPE Networking's Bug Bounty program (Bugcrowd)" } ], "cve": "CVE-2026-95706", "notes": [ { "category": "general", "text": "Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with the privileges of the impacted mechanism on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "environmentalScore": 7.2, "environmentalSeverity": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "temporalScore": 7.2, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Authenticated Command Injection Vulnerabilities in AOS-8" }, { "acknowledgments": [ { "names": [ "LIUPENG" ], "organization": "HPE Networking's Bug Bounty program (Bugcrowd)" } ], "cve": "CVE-2026-95707", "notes": [ { "category": "general", "text": "A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "environmentalScore": 7.2, "environmentalSeverity": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "temporalScore": 7.2, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8" }, { "acknowledgments": [ { "names": [ "zzcentury" ], "organization": "HPE Networking's Bug Bounty program (Bugcrowd)" } ], "cve": "CVE-2026-95708", "notes": [ { "category": "general", "text": "Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "environmentalScore": 7.2, "environmentalSeverity": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "temporalScore": 7.2, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Authenticated File Write leads to Command Injection Vulnerabilities in AOS-10" }, { "acknowledgments": [ { "names": [ "LIUPENG" ], "organization": "HPE Networking's Bug Bounty program (Bugcrowd)" } ], "cve": "CVE-2026-95709", "notes": [ { "category": "general", "text": "Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "environmentalScore": 7.2, "environmentalSeverity": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "temporalScore": 7.2, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Authenticated Command Injection Vulnerabilities in AOS-10" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-95710", "notes": [ { "category": "general", "text": "An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 and could allow an unauthenticated adjacent attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected system, with a limited impact to the integrity of the affected component.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14", "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13", ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14", "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13", ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "environmentalScore": 7.1, "environmentalSeverity": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 7.1, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13", ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Unauthenticated Adjacent Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-10 or AOS-8" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-95711", "notes": [ { "category": "general", "text": "An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "environmentalScore": 7.1, "environmentalSeverity": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 7.1, "temporalSeverity": "HIGH", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Authentication Bypass Leading to Remote Code Execution in AOS-10 Web-Based Management Interface" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-95712", "notes": [ { "category": "general", "text": "A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to access limited information handled by the affected service. Successful exploitation could allow an attacker to view some information and to disrupt the availability of the affected service.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "environmentalScore": 7.1, "environmentalSeverity": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 7.1, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Unauthenticated Adjacent Sensitive Information Disclosure and Denial-of-Service in AOS-8 via the PAPI Protocol" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-95713", "notes": [ { "category": "general", "text": "An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected interface, along with limited access to or modification of some system data.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "environmentalScore": 7, "environmentalSeverity": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 7, "temporalSeverity": "HIGH", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 Command Line Interface" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-95714", "notes": [ { "category": "general", "text": "A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "environmentalScore": 6.8, "environmentalSeverity": "MEDIUM", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "temporalScore": 6.8, "temporalSeverity": "MEDIUM", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Authenticated Adjacent Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10" }, { "acknowledgments": [ { "names": [ "PinkDraconian" ], "organization": "HPE Networking's Bug Bounty program (Bugcrowd)" } ], "cve": "CVE-2026-95715", "notes": [ { "category": "general", "text": "An unauthenticated command injection vulnerability exists in the command line interface of AOS-10. Successful exploitation could allow an attacker with physical access to execute arbitrary commands as a privileged user on the underlying operating system leading to complete system compromise.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "environmentalScore": 6.8, "environmentalSeverity": "MEDIUM", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 6.8, "temporalSeverity": "MEDIUM", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Unauthenticated Local Command Injection Vulnerability in AOS-10 Command Line Interface" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-95716", "notes": [ { "category": "general", "text": "An authentication bypass in the PAPI protocol of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation allows an attacker to change the state of certain settings of a vulnerable system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "environmentalScore": 6.5, "environmentalSeverity": "MEDIUM", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 6.5, "temporalSeverity": "MEDIUM", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Authentication Bypass in the PAPI Protocol of AOS-10 allows Unauthorized Configuration Changes" }, { "acknowledgments": [ { "names": [ "LIUPENG" ], "organization": "HPE Networking's Bug Bounty program (Bugcrowd)" } ], "cve": "CVE-2026-95717", "notes": [ { "category": "general", "text": "A stored cross-site scripting (XSS) vulnerability exists in the web-based management interface of AOS that could allow an authenticated remote attacker with high privileges to inject malicious scripts. Successful exploitation could allow an attacker to execute arbitrary script code in the context of another authenticated user's browser session.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14", "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13", ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14", "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13", ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "environmentalScore": 5.5, "environmentalSeverity": "MEDIUM", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "CHANGED", "temporalScore": 5.5, "temporalSeverity": "MEDIUM", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13", ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in AOS Web-Based Management Interface" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-95718", "notes": [ { "category": "general", "text": "An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to make limited unauthorized modifications to certain settings of the affected system.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "environmentalScore": 5.3, "environmentalSeverity": "MEDIUM", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 5.3, "temporalSeverity": "MEDIUM", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Authentication Bypass Vulnerability in the PAPI Protocol of AOS-8" }, { "acknowledgments": [ { "names": [ "LIUPENG" ], "organization": "HPE Networking's Bug Bounty program (Bugcrowd)" } ], "cve": "CVE-2026-95719", "notes": [ { "category": "general", "text": "An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting normal operation of the affected device.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "known_affected": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-10.8.1.2", "AOS-10.7.2.7", "AOS-10.4.1.14" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "environmentalScore": 4.9, "environmentalSeverity": "MEDIUM", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "temporalScore": 4.9, "temporalSeverity": "MEDIUM", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ ">=10.8.0.0|<=10.8.1.1", ">=10.6.0.0|<=10.7.2.6", ">=10.3.0.0|<=10.4.1.13" ] } ], "title": "Authenticated Arbitrary File Deletion Vulnerability leads to Denial-of-Service in AOS-10" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-95720", "notes": [ { "category": "general", "text": "A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to cause denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting network operations.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "environmentalScore": 4.4, "environmentalSeverity": "MEDIUM", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "temporalScore": 4.4, "temporalSeverity": "MEDIUM", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8" }, { "acknowledgments": [ { "organization": "HPE Networking" } ], "cve": "CVE-2026-95721", "notes": [ { "category": "general", "text": "A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticated low privilege attacker with local access to view some system files and interrupt the normal operation of the affected service.", "title": "Details" }, { "category": "other", "text": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "title": "Workaround" } ], "product_status": { "fixed": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "known_affected": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] }, "remediations": [ { "category": "vendor_fix", "details": "Upgrade to a fixed software version listed in the Resolution section of the advisory.", "product_ids": [ "AOS-8.13.3.1", "AOS-8.10.0.24" ], "url": "https://networkingsupport.hpe.com" }, { "category": "workaround", "details": "To minimize the likelihood of an attacker exploiting these vulnerabilities, HPE Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above along with accounting controls for tracking and logging user activities and resource usage.", "product_ids": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "environmentalScore": 3.3, "environmentalSeverity": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "temporalScore": 3.3, "temporalSeverity": "LOW", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L", "version": "3.1" }, "products": [ ">=8.12.0.0|<=8.13.3.0", ">=8.10.0.0|<=8.10.0.23" ] } ], "title": "Authenticated Local Memory Corruption Vulnerability in AOS-8 Web-Based Management Interface" } ] }