HPE Aruba Networking AOS-CX Command Injection Vulnerability in CLI

A command injection vulnerability has been identified in the command line interface (CLI) of HPE Aruba Networking AOS-CX Switches. This vulnerability allows authenticated remote attackers with high privileges to inject unauthorized commands via a custom binary used in the CLI. Successful exploitation could lead to the execution of these unauthorized commands on the affected switch.

Impact

Exploitation of this vulnerability could result in unauthorized command execution on the affected AOS-CX switch.

Remediation

To address this vulnerability, it is recommended to upgrade HPE Networking AOS-CX to version 10.17.1001 or above, 10.16.1030 or above, 10.13.1161 or above, or 10.10.1180 or above, depending on the current version. For more information, visit the HPE Networking Support Portal.