Vulnerabilities

A vulnerability exists in certain AOS-CX switch models which could allow an attacker with access to the recovery console to bypass normal authentication.

A vulnerability in the web-based management interface of AOS-CX could allow a remote unauthenticated attacker to fingerprint the exact version AOS-CX running on the switch.

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX.

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX.

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX.

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX.

A vulnerability in the web-based management interface of AOS-CX could allow a remote authenticated user with read-only privileges to escalate their permissions to those of an administrative user.

Authenticated command injection vulnerabilities exist in the AOS-CX Network Analytics Engine via NAE scripts.

Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection.

Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection.

AOS-CX lacks Anti-CSRF protections in place for state-changing operations.

AOS-CX lacks Anti-CSRF protections in place for state-changing operations.