CVE-2026-73761

Summary

An out-of-bounds read vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated information disclosure by sending a specially crafted packet. Successful exploitation of this vulnerability results in the ability to disclose sensitive information from the underlying operating system.

Affected Software

VendorProductVersion RangeStatus
Hewlett Packard Enterprise (HPE)AOS-CX10.18.0000 <= 10.18.0001affected
Hewlett Packard Enterprise (HPE)AOS-CX10.17.0000 <= 10.17.1021affected
Hewlett Packard Enterprise (HPE)AOS-CX10.16.0000 <= 10.16.1051affected
Hewlett Packard Enterprise (HPE)AOS-CX10.13.0000 <= 10.13.1180affected
Hewlett Packard Enterprise (HPE)AOS-CX10.10.0000 <= 10.10.1180affected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References