PT-2025-1019 · Hewlett Packard · Hpe Aruba Networking Cx 10000 Series Switches

Published 2025-01-08 · Updated 2025-01-08 · CVE-2024-54010

Positive Technologies (AI Summary)

CVSS v3.1

3.4

Low

Base vector

AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions HPE Aruba Networking CX 10000 Series Switches (affected versions not specified)

Description A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists, which could allow an unauthenticated adjacent attacker to conduct a packet forwarding attack against the ICMP and UDP protocol. For this attack to be successful, an attacker requires a switch configuration that allows packets routing (at layer 3). Successful exploitation could allow an attacker to bypass security policies, potentially leading to unauthorized data exposure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Information Disclosure

Weakness Enumeration

CWE-863

CWE-200

Related Identifiers

BDU:2025-00216

CVE-2024-54010

Affected Products

Hpe Aruba Networking Cx 10000 Series Switches

References · 8

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04772en_us&docLocale=en_US · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-00216 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-54010 · Security Note
• https://twitter.com/VulmonFeeds/status/1877136240648057078 · Twitter Post
• https://csaf.arubanetworks.com/2024/hpe_aruba_networking_-_hpesbnw04772.txt · Note
• https://csaf.arubanetworks.com/2025/hpe_aruba_networking_-_hpesbnw04772.txt · Note
• https://t.me/cvedetector/14741 · Telegram Post
• https://twitter.com/CVEnew/status/1877101373126271158 · Twitter Post