CVE-2026-79883 | BDVDB-2026-394304 Detail
Hewlett Packard Enterprise (HPE)ArubaOS (AOS)
Description#
A buffer overflow vulnerability in the PAPI protocol of HPE Networking AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10, and to interrupt the normal operation of the affected service.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact low, availability impact high. Attack vector: adjacent.
Weaknesses#
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.