Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

Unauthenticated Denial-of-Service (DoS) Vulnerability in AOS-CX (Hewlett Packard Enterprise (HPE) AOS-CX)

CVE-2026-73773
HIGH 7.5

At a glance

Source
NVD
EPSS
EPSS 0.46 % · percentile 40 ()
State
PUBLISHED
Published
Updated
Assigner
hpe
NVD status
Analyzed

Search on…

Description

An unauthenticated Denial-of-Service (DoS) vulnerability exists in the API endpoint of AOS-CX. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service.

Weaknesses (CWE)

  • CWE-400 — Uncontrolled Resource Consumption

References

Scores

VersionScoreVectorScored by
CVSS 3.1HIGH 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hhpe
CVSS 3.1HIGH 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HNVD · security-alert@hpe.com (Secondary)

European references

CERT-FR advisories

Affected configurations (NVD CPE)

Affected products

ProductVersions
Hewlett Packard Enterprise (HPE) · AOS-CXaffected 10.18.0000 ≤ 10.18.0001 ; affected 10.17.0000 ≤ 10.17.1021 ; affected 10.16.0000 ≤ 10.16.1051 ; affected 10.13.0000 ≤ 10.13.1180 ; affected 10.10.0000 ≤ 10.10.1180

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD