Vulnerabilities

Stack overflow vulnerabilities exist in an API endpoint of AOS-CX.

A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution.

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface.

A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site Request Forgery (CSRF) protection.

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls.

A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access.

Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls.

A signature verification bypass vulnerability exists in the command line interface of AOS-CX.

Vulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with low privileges to access sensitive information.

A buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated disclosure of sensitive information by sending specially crafted packets to the affected system.

An unauthenticated Denial-of-Service (DoS) vulnerability exists in the API endpoint of AOS-CX.

Buffer overflow vulnerabilities exist in an underlying service of AOS-CX that could lead to an unauthenticated denial-of-service condition by sending specially crafted packets to the affected device.

An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing.

An authenticated arbitrary file write vulnerability exists in AOS-CX.

A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input.

Authenticated command injection vulnerabilities exist in the command line interface of AOS-CX.

Command injection vulnerabilities in the API endpoint of AOS-CX could allow an authenticated remote attacker with administrative privileges to inject arbitrary commands.

Authenticated path traversal vulnerabilities exist in API endpoints of AOS-CX.

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls.

A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands.

A vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor to circumvent existing access controls.

An out-of-bounds read vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated information disclosure by sending a specially crafted packet.

An authenticated Path Traversal vulnerability exists in AOS-CX.

Vulnerabilities in AOS-CX could allow an unauthenticated remote malicious actor to trigger a denial-of-service condition by sending specially crafted packets.

A privilege escalation vulnerability exists in the API endpoint of AOS-CX.