VulnerabilityPublished 14 Mar 2026

Critical HPE AOS-CX Vulnerability Allows Admin Password Resets

Source SecurityWeek

Severity

Critical

Rated Critical by Threat Radar from the SecurityWeek text

Data as of 16 Mar 2026, 19:21 UTC

remote

What to do

AI-suggested

Until official patches are released, organizations should implement network segmentation to isolate HPE AOS-CX devices from untrusted networks and restrict management interface access to trusted administrators only. Deploy strict access control lists (ACLs) and firewall rules to limit remote access to management ports. Monitor network traffic for unusual activities targeting HPE devices, including unauthorized password reset attempts or configuration changes. Enable logging and alerting on administrative actions to detect potential exploitation attempts promptly. Consider deploying intrusion detection/prevention systems (IDS/IPS) with signatures tailored to detect anomalous behavior related to this vulnerability. Conduct regular audits of device configurations and credentials to identify unauthorized changes. Engage with HPE support for guidance and timely updates. Prepare incident response plans specific to network device compromise scenarios. Avoid exposing management interfaces directly to the internet or untrusted networks. Finally, educate network administrators about the vulnerability and encourage vigilance.

Description

The vulnerability can be exploited remotely, without authentication, to circumvent existing authentication controls. The post Critical HPE AOS-CX Vulnerability Allows Admin Password Resets appeared first on SecurityWeek .

Impact

The vulnerability's impact is severe, as it allows attackers to gain unauthorized administrative access to network devices, potentially leading to full network compromise. Attackers can reset admin passwords, lock out legitimate administrators, alter device configurations, and intercept or manipulate network traffic. This can result in data breaches, network outages, and loss of control over critical infrastructure. Enterprises, data centers, and service providers using HPE AOS-CX devices may face operational disruptions and reputational damage. The ease of exploitation without authentication increases the likelihood of attacks, especially in environments where these devices are exposed to untrusted networks. The absence of known exploits in the wild currently limits immediate risk, but the vulnerability remains a high-value target for threat actors. The potential for lateral movement and persistent access within networks further amplifies the threat. Overall, the vulnerability poses a critical risk to the confidentiality, integrity, and availability of organizational networks worldwide.

Summary

The reported security threat concerns a critical vulnerability in Hewlett Packard Enterprise's AOS-CX network operating system, which powers various HPE network switches and devices. This vulnerability allows an unauthenticated remote attacker to bypass authentication mechanisms and reset administrator passwords. By exploiting this flaw, attackers can gain full administrative control over affected devices, enabling them to manipulate network configurations, intercept or redirect traffic, and potentially disrupt network operations. The vulnerability is notable for requiring no authentication or user interaction, making exploitation straightforward for remote attackers. Although specific affected versions are not detailed, the impact spans all devices running vulnerable versions of HPE AOS-CX. No patches or mitigation details have been provided yet, and no active exploitation has been reported, but the critical severity rating underscores the urgency. The lack of authentication bypass means traditional perimeter defenses may be insufficient, and attackers could leverage this to establish persistent footholds within enterprise networks. The vulnerability compromises the confidentiality, integrity, and availability of network infrastructure, posing a significant threat to organizations relying on HPE networking equipment.

References

securityweek.com/critical-hpe-aos-cx-vulnerability-allows-admin-password-resets/ (opens in a new tab)

Community reviews

Loading reviews…

What to do

Description

AI analysisMachine-generated, updated 14 Mar 2026, 10:59 UTC

References

Community reviews

Related threats