Medium · published November 19, 2025
A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software. Successful exploitation of this vulnerability could allow an attacker with administrative access to execute specific code that renders the switch non-bootable and effectively non-functional.
| Product | Versions | Fixed in |
|---|---|---|
| hpe/arubaos-cx | ≥ 10.10.0000, < 10.10.1170 | 10.10.1170 |
| hpe/arubaos-cx | ≥ 10.13.0000, < 10.13.1101 | 10.13.1101 |
| hpe/arubaos-cx | ≥ 10.14.0000, < 10.14.1060 | 10.14.1060 |
| hpe/arubaos-cx | ≥ 10.15.0000, < 10.15.1030 | 10.15.1030 |
| hpe/arubaos-cx | ≥ 10.16.0000, < 10.16.1001 | 10.16.1001 |