CVE-2025-25042: fallo de gravedad media en Hewlett Packard Enterprise (HPE) AOS-CX
Authenticated Access Control Vulnerability allows Sensitive Information Disclosure in AOS-CX REST Interface
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 4.3epss 0.3%
A vulnerability in the AOS-CX REST interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation could allow an attacker to read encrypted credentials of other users on the switch, potentially leading to further unauthorized access or data breaches.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Productos afectados
Hewlett Packard Enterprise (HPE) · AOS-CXCVEs relacionadas — Hewlett Packard Enterprise (HPE) AOS-CX
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-73767HIGHAuthenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line InterfaceEPSS 1.7%CVE-2026-73766HIGHAuthenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CXEPSS 1.5%CVE-2026-23816HIGHAuthenticated Command Injection found in admin AOS-CX CLI commandEPSS 1.3%CVE-2026-23815HIGHAuthenticated Command Injection found in AOS-CX Administrative CLI CommandEPSS 1.0%CVE-2026-73765HIGHAuthenticated Path Traversal Vulnerabilities Lead to Remote Code Execution in AOS-CXEPSS 0.9%CVE-2026-63454HIGHAuthenticated Path Traversal Vulnerability Leads to Remote Code Execution in AOS-CXEPSS 0.9%