AOS-Switch (AOS-S) vulnerabilities
7 known vulnerabilities in AOS-Switch (AOS-S) from Hewlett Packard Enterprise. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
AOS-Switch (AOS-S): Improper Privilege Management
A privilege escalation vulnerability exists in the API of AOS-S. Successful exploitation could allow an authenticated read-only user to escalate their privileges and gain administrative access to the affected system.
- 9.1 Critical severity
AOS-Switch (AOS-S): Buffer Copy without Checking Size of Input
Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to expose sensitive memory contents and cause a denial of service on the device.
- 9.3 Critical severity
AOS-Switch (AOS-S): Buffer Copy without Checking Size of Input
An unauthenticated buffer overflow vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated adjacent attacker to expose sensitive memory contents and cause a denial of service on the affected device.
- 9.6 Critical severity
AOS-Switch (AOS-S): Improper Restriction of Operations within the Bounds of a Memory Buffer
Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary code.
- 9.8 Critical severity
AOS-Switch (AOS-S): Buffer Copy without Checking Size of Input
Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code.
- 9.8 Critical severity
AOS-Switch (AOS-S): Improper Authentication
A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Success
- 9.8 Critical severity
AOS-Switch (AOS-S): Improper Privilege Management
Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to gain unauthorized access to the affected system.