← Back

CVE-2024-54010

nvd nist
Published: Jan 8, 2025Modified: Sep 22, 2026

JSON object

Loading...
3.4
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
Exploitability: 1.6 / Impact: 1.4
Source: NVD

Description

A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists. It could allow an unauthenticated adjacent attacker to conduct a packet forwarding attack against the ICMP and UDP protocol. For this attack to be successful an attacker requires a switch configuration that allows packets routing (at layer 3). Configurations that do not allow network traffic routing are not impacted. Successful exploitation could allow an attacker to bypass security policies, potentially leading to unauthorized data exposure.

Affected (3)

Products: Hpe: Arubaos Cx
1 product
Arubaos Cx
Configuration A
3 vulnerable · 7 platform
Vulnerable SoftwareAffected Versions
Hpe
10.10.0000 ≤ version < 10.13.1070
10.14.0000 ≤ version < 10.14.1030
10.15.0000 ≤ version < 10.15.1000
Running on/withPlatform Versions
Hpe
Aruba Cx 10000 48y6c (r8p13a)
All versions
Hpe
Aruba Cx 10000 48y6c (r8p14a)
All versions
Hpe
Aruba Cx 10000 48y6c (s0f98a)
All versions
Hpe
Aruba Cx 10040 (s4r58a)
All versions
Hpe
Aruba Cx 10040 32p (s4r54a)
All versions
Hpe
Aruba Cx 10040 32p (s4r55a)
All versions
Hpe
Aruba Cx 10040 32p (s4r56a)
All versions

References (2)

Timeline

No history available yet.