CVE-2026-73780
A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site Request Forgery (CSRF) protection. This could allow a remote unauthenticated attacker to execute arbitrary input against the affected interface if the attacker can convince an authenticated user of the interface to interact with a specially crafted URL.
취약점 유형
A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site Request Forgery (CSRF) protection. This could allow a remote unauthenticated attacker to execute arbitrary input against the affected interface if the attacker can convince an authenticated user of the interface to interact with a specially crafted URL.
영향받는 제품
- hpe arubaos-cx
- hpe aruba_cx_10000-48y6c_\(r8p13a\)
- hpe aruba_cx_10000-48y6c_\(r8p14a\)
- hpe aruba_cx_10000-48y6c_\(s0f98a\)
- hpe aruba_cx_10040_\(s4r58a\)
- hpe aruba_cx_10040_32p_\(s4r54a\)
- hpe aruba_cx_10040_32p_\(s4r55a\)
- hpe aruba_cx_10040_32p_\(s4r56a\)
참고 자료
공격자보다 먼저 취약점을 찾으세요.
GitHub로 로그인하고 1분 안에 첫 감사를 실행하세요. 무료 플랜은 신용카드가 필요 없습니다.