CVE-2026-73774

Analyzed Analyzed - Analysis Complete

Buffer Overflow in HPE AOS-CX OS

Publication date: 2026-09-01

Last updated on: 2026-09-04

Assigner: Hewlett Packard Enterprise (HPE)

Description

A buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated disclosure of sensitive information by sending specially crafted packets to the affected system. Successful exploitation of this vulnerability could result in limited disclosure or modification of information and disruption of the affected system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-01

Last Modified

2026-09-04

Generated

2026-09-10

AI Q&A

2026-09-02

EPSS Evaluated

2026-09-09

NVD

CVE-2026-73774

Affected Vendors & Products

Vendor	Product	Version / Range
hpe	arubaos-cx	From 10.13.0000 (inc) to 10.13.1180 (inc)
hpe	arubaos-cx	to 10.10.1180 (inc)
hpe	arubaos-cx	From 10.16.0000 (inc) to 10.16.1051 (inc)
hpe	arubaos-cx	From 10.17.0000 (inc) to 10.17.1021 (inc)
hpe	arubaos-cx	10.18.0001

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

This is a buffer overflow vulnerability in the operating system of AOS-CX. It allows unauthenticated attackers to send specially crafted packets to the system, potentially leading to disclosure of sensitive information, limited modification of data, or disruption of system operations.

Detection Guidance

Detection of this vulnerability requires monitoring network traffic for malformed packets targeting AOS-CX systems. Inspect logs for unusual packet sizes or patterns. Use network monitoring tools like Wireshark to capture and analyze traffic. Ensure intrusion detection systems (IDS) are updated to detect buffer overflow attempts.

Impact Analysis

Exploitation could result in sensitive information being exposed, unauthorized changes to data, or system downtime. Attackers might gain access to confidential information or disrupt critical services.

Compliance Impact

This vulnerability could lead to unauthorized disclosure of personal or sensitive data, violating GDPR and HIPAA requirements. Organizations may face legal penalties, fines, or reputational damage if exploited.

Mitigation Strategies

Apply the latest security patches or updates provided by HPE for AOS-CX to address the buffer overflow vulnerability. Isolate affected systems from untrusted networks to limit exposure. Monitor network traffic for unusual packets targeting the system.

Hi! I’m here to help you understand CVE-2026-73774. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70