← CVE Intelligence

CVE-2025-27080

Authenticated Sensitive Information Disclosure exposes Credentials in AOS-CX Command Line Interface PUBLISHED

Description (CNA)

Vulnerabilities in the command line interface of AOS-CX could allow an authenticated remote attacker to expose sensitive information. Successful exploitation could allow an attacker to gain unauthorized access to services outside of the impacted switch, potentially leading to lateral movement involving those services.

Affected (CNA)

Vendor / productVersions
Hewlett Packard Enterprise (HPE) / AOS-CXaffected 10.10.0000 through <=10.10.1140; affected 10.13.0000 through <=10.13.1070; affected 10.14.0000 through <=10.14.1030; affected 10.15.0000 through <=10.15.1000

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.