CVE-2024-54010

Katalog CVE

CVSS 3.4 · Low EPSS 0,23%

Kerentanan Incorrect Authorization pada hpe arubaos-cx. Skor CVSS 3.1 3.4 (Low) menurut NVD.

Deskripsi (NVD)

A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists. It could allow an unauthenticated adjacent attacker to conduct a packet forwarding attack against the ICMP and UDP protocol. For this attack to be successful an attacker requires a switch configuration that allows packets routing (at layer 3). Configurations that do not allow network traffic routing are not impacted. Successful exploitation could allow an attacker to bypass security policies, potentially leading to unauthorized data exposure.

Rincian

Terbit di NVD

8 Januari 2025

Terakhir diubah

22 September 2026

Status NVD

Analyzed

CVSS 3.1

3.4 (Low), sumber NVD
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-863: Incorrect Authorization

EPSS (30 hari)

0,23% peluang dieksploitasi; lebih tinggi dari 12,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04772en_us&docLocale=en_US advisory vendor
• https://csaf.arubanetworks.com/2024/hpe_aruba_networking_-_hpesbnw04772.txt broken link