Vulnerability Description
An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing. An unauthenticated remote attacker could exploit this vulnerability under specific conditions to bypass authentication controls or exhaust system resources. Successful exploitation could result in unauthorized access or denial of service affecting the management interface.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hpe | Arubaos-Cx | <= 10.10.1180 |
| Hpe | Aruba Cx 10000-48Y6C \(R8P13A\) | - |
| Hpe | Aruba Cx 10000-48Y6C \(R8P14A\) | - |
| Hpe | Aruba Cx 10000-48Y6C \(S0F98A\) | - |
| Hpe | Aruba Cx 10040 \(S4R58A\) | - |
| Hpe | Aruba Cx 10040 32P \(S4R54A\) | - |
| Hpe | Aruba Cx 10040 32P \(S4R55A\) | - |
| Hpe | Aruba Cx 10040 32P \(S4R56A\) | - |
| Hpe | Aruba Cx 4100I 12-Port \(Jl817A\) | - |
| Hpe | Aruba Cx 4100I 24-Port \(Jl818A\) | - |
| Hpe | Aruba Cx 6000 12G \(R8N89A\) | - |
| Hpe | Aruba Cx 6000 12P \(R8N89B\) | - |
| Hpe | Aruba Cx 6000 12P \(S4R21A\) | - |
| Hpe | Aruba Cx 6000 24G \(R8N87A\) | - |
| Hpe | Aruba Cx 6000 24G \(R8N88A\) | - |
| Hpe | Aruba Cx 6000 24P \(R8N87B\) | - |
| Hpe | Aruba Cx 6000 24P \(R8N88B\) | - |
| Hpe | Aruba Cx 6000 24P \(S4R26A\) | - |
| Hpe | Aruba Cx 6000 24P \(S4R27A\) | - |
| Hpe | Aruba Cx 6000 48G \(R8N85A\) | - |
Related Weaknesses (CWE)
References
- https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us&docLocalPatchVendor Advisory
FAQ
What is CVE-2026-73771?
CVE-2026-73771 is a vulnerability with a CVSS score of 7.5 (HIGH). An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing. An unauthenticated remote attacker could exploit this vulnerability...
How severe is CVE-2026-73771?
CVE-2026-73771 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-73771?
Check the references section above for vendor advisories and patch information. Affected products include: Hpe Arubaos-Cx, Hpe Aruba Cx 10000-48Y6C \(R8P13A\), Hpe Aruba Cx 10000-48Y6C \(R8P14A\), Hpe Aruba Cx 10000-48Y6C \(S0F98A\), Hpe Aruba Cx 10040 \(S4R58A\).