Advisoriesby IbisHewlett Packard EnterpriseCVE-2026-79883
Hewlett Packard Enterprise ArubaOS (AOS): buffer overflow
No fix yet
A buffer overflow vulnerability in the PAPI protocol of HPE Networking AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10, and to interrupt the normal operation of the affected service.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| ArubaOS (AOS) Product | >= 10.8.0.0, <= 10.8.1.1 | No fix yet |
| >= 10.7.0.0, <= 10.7.2.6 | No fix yet | |
| >= 10.4.0.0, <= 10.4.1.13 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-120