The flaw stems from improper handling of user-supplied input in the operating system. An attacker able to reach the management interface could leverage this weakness to inject and run commands with elevated privileges, bypassing authentication altogether.

Administrators are urged to act quickly, as the vulnerability is rated critical in severity. HPE has not reported any active exploitation in the wild at the time of the advisory, but the attack surface is significant given the widespread deployment of ArubaOS-CX in enterprise and data center environments.

The following actions are recommended for mitigation:

• Upgrade affected devices to the latest patched ArubaOS-CX version provided in the HPE security bulletin.
• Restrict access to management interfaces (SSH, HTTPS, SNMP, and CLI) to trusted administrative networks only.
• Disable any unused management protocols to reduce the attack surface.
• Monitor device logs for unusual activity or unauthorized configuration changes.

Network teams running Aruba switches should verify their current firmware version and compare it against the patched release immediately.

Source: BleepingComputer

Has your team already checked the ArubaOS-CX version in your environment against the new advisory, and if so, are you planning a maintenance window for the upgrade this week?