【Vulnerability Alert】HPE Networking AOS-10 and AOS-8 Have Multiple High-Risk Security Vulnerabilities. Please Verify and Take Action as Soon as Possible
publish date :
2026-11-06
update date :
2026-11-06
Source: Ministry of education information & communication security contingency platform
| Publication Number | TACERT-ANA-2026110409113131 | Publication Time | 2026-11-04 09:58:32 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2026-11-04 09:58:32 |
| Impact Level | Medium | ||
| [Subject] 【Vulnerability Alert】HPE Networking AOS-10 and AOS-8 Have Multiple High-Risk Security Vulnerabilities. Please Verify and Take Action as Soon as Possible |
|||
| [Content] Forwarded from the National Institute of Cyber Security NISAC-200-202611-00000002 Researchers have discovered multiple high-risk security vulnerabilities in HPE Networking AOS-10 and AOS-8. These vulnerabilities include Authentication Bypass, Buffer Overflow, SQL Injection, Command Injection, and Exposure of Sensitive Information. The most severe vulnerabilities may allow an unauthenticated remote attacker to bypass existing authentication controls and subsequently execute arbitrary commands with root privileges on the underlying operating system. Please verify and take action as soon as possible. Information Sharing Level: WHITE (Information content can be publicly disclosed) |
|||
| [Affected Platform] AOS-10.8.x.x: Version 10.8.1.1 and earlier (including 10.8.1.1) AOS-10.7.x.x: Version 10.7.2.6 and earlier (including 10.7.2.6) AOS-10.4.x.x: Version 10.4.1.13 and earlier (including 10.4.1.13) AOS-8.13.x.x: Version 8.13.3.0 and earlier (including 8.13.3.0) AOS-8.10.x.x: Version 8.10.0.23 and earlier (including 8.10.0.23) |
|||
| [Recommended Actions] The vendor has released patches or updates to address these vulnerabilities. Please refer to the official instructions for remediation. The URL is as follows: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us |
|||
|
[Reference] 1. https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us |
|||
(This notification is for informational purposes only and does not constitute a cybersecurity incident).
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
Organizer:
Computer Center