CVE-2024-54010

תיאור (מקור, אנגלית)

A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists. It could allow an unauthenticated adjacent attacker to conduct a packet forwarding attack against the ICMP and UDP protocol. For this attack to be successful an attacker requires a switch configuration that allows packets routing (at layer 3). Configurations that do not allow network traffic routing are not impacted. Successful exploitation could allow an attacker to bypass security policies, potentially leading to unauthorized data exposure.

מדדים

CVSS 3.1

3.4 (LOW) מקור הציון: NVD CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-16/10/2026

CWE

CWE-863

מוצרים מושפעים

hpe: arubaos-cx; hpe: aruba cx 10000-48y6c \(r8p13a\); hpe: aruba cx 10000-48y6c \(r8p14a\); hpe: aruba cx 10000-48y6c \(s0f98a\); hpe: aruba cx 10040 \(s4r58a\); hpe: aruba cx 10040 32p \(s4r54a\); hpe: aruba cx 10040 32p \(s4r55a\); hpe: aruba cx 10040 32p \(s4r56a\)

קישורים

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04772en_us&docLoc‮… Vendor Advisory
• https://csaf.arubanetworks.com/2024/hpe_aruba_networking_-_hpesbnw04772.txt Broken Link