HPE ArubaOS-CX Platform-Level Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in ArubaOS-CX software, specifically in versions AOS-CX 10.16.1000 and below, AOS-CX 10.15.1020 and below, AOS-CX 10.14.1050 and below, AOS-CX 10.13.1090 and below, and AOS-CX 10.10.1160 and below. This vulnerability allows an attacker with administrative access to execute code that renders the switch non-bootable and effectively non-functional.

Impact

Exploitation of this vulnerability could lead to the switch becoming non-bootable and non-functional.

Remediation

Users are advised to upgrade to AOS-CX 10.16.1001 and above, AOS-CX 10.15.1030 and above, AOS-CX 10.14.1060 and above, AOS-CX 10.13.1101 and above, or AOS-CX 10.10.1170 and above. These updated versions can be downloaded from the HPE Networking Support Portal.