VulnerabilityDeferred

CVE-2025-27080

Vulnerabilities in the command line interface of AOS-CX could allow an authenticated remote attacker to expose sensitive information.

MEDIUM 6.0EPSS 0.19%

Does this matter?

Lower severity and a low EPSS score (0.19%). Track it; it rarely justifies an emergency change on its own.

Description

Vulnerabilities in the command line interface of AOS-CX could allow an authenticated remote attacker to expose sensitive information. Successful exploitation could allow an attacker to gain unauthorized access to services outside of the impacted switch, potentially leading to lateral movement involving those services.

CVSS 3.1: 6.0 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
EPSS: 0.19% probability · 9th percentile
CISA KEV: Not listed
Weakness: CWE-359
Source: security-alert@hpe.com

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04818en_us&docLocale=en_US

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.