vulnerability

Aruba AOS-CX: CVE-2025-27080: Authenticated Sensitive Information Disclosure exposes Credentials in AOS-CX Command Line Interface

Severity
4
CVSS
(AV:L/AC:L/Au:M/C:C/I:N/A:N)
Published
Mar 18, 2025
Added
Mar 20, 2025
Modified
Jul 2, 2025

Description

Vulnerabilities in the command line interface of AOS-CX could allow an authenticated remote attacker to expose sensitive information. Successful exploitation could allow an attacker to gain unauthorized access to services outside of the impacted switch, potentially leading to lateral movement involving those services.

Solution

aruba-aos-cx-cve-2025-27080
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.