PT-2025-1019

CVE-2024-54010

·

Published

2025-01-08

·

Updated

2026-09-22

Description by

CVSS 3.1
3.4
Low
MetricsAV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions HPE Aruba Networking CX 10000 Series Switches (affected versions not specified)
Description A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists, which could allow an unauthenticated adjacent attacker to conduct a packet forwarding attack against the ICMP and UDP protocol. For this attack to be successful, an attacker requires a switch configuration that allows packets routing (at layer 3). Successful exploitation could allow an attacker to bypass security policies, potentially leading to unauthorized data exposure.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾