HPE Aruba Networking AOS-CX Authenticated Privilege Escalation Vulnerability in SSH Restricted Shell

A vulnerability exists in the SSH restricted shell interface of HPE Aruba Networking AOS-CX software, specifically in versions 10.16.1000 and below, 10.15.1020 and below, 10.14.1050 and below, 10.13.1090 and below, and 10.10.1160 and below. This vulnerability allows authenticated read-only users to bypass access controls and gain administrator privileges on the affected system.

Impact

Exploitation of this vulnerability could lead to unauthorized administrative access on the affected system.

Remediation

Users can upgrade to HPE Aruba Networking AOS-CX versions 10.16.1001 and above, 10.15.1030 and above, 10.14.1060 and above, 10.13.1101 and above, or 10.10.1170 and above. These updated versions include the necessary fixes for this vulnerability.