HPE Aruba Networking AOS-CX Unauthenticated Open Redirect Vulnerability

An open redirect vulnerability has been identified in the web-based management interface of HPE Aruba Networking AOS-CX Switches. This vulnerability allows an unauthenticated remote attacker to redirect users to an arbitrary URL. The issue affects AOS-CX software versions 10.17.0001 and below, 10.16.1020 and below, 10.13.1160 and below, and 10.10.1170 and below.

Impact

Exploitation of this vulnerability could lead to unauthorized URL redirection, potentially facilitating phishing attacks or other malicious activities by directing users to harmful websites.

Remediation

Users are advised to upgrade to AOS-CX 10.17.1001 and above, AOS-CX 10.16.1030 and above, AOS-CX 10.13.1161 and above, or AOS-CX 10.10.1180 and above. For assistance, contact HPE Services - HPE Aruba Networking or visit the HPE Networking Support Portal.