Threats Tagged 'cve-2026-73778'

CVE-2026-73778 is a high-severity vulnerability in Hewlett Packard Enterprise (HPE) AOS-CX's Credential Manager component. It allows an unauthenticated remote attacker to gain unauthorized administrative access by exploiting a predictable factory-default password during the device's initial setup state (factory-default or post-ZTP) before any administrator credentials are configured. Successful exploitation grants full administrative control over the affected device during initial setup.

A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote attacker could exploit this vulnerability on a device in its factory-default or post-ZTP state before any administrator has configured credentials by providing a predictable factory-default password. Successful exploitation could result in full administrative control of the affected device during the initial setup process.

Multiple vulnerabilities in a daemon of Hewlett Packard Enterprise (HPE) AOS-CX allow unauthenticated remote attackers to send specially crafted packets that may lead to remote code execution with elevated privileges. These vulnerabilities affect several versions of AOS-CX and have a critical severity rating.