A high-severity command injection vulnerability in HPE AOS-CX allows low-privilege authenticated attackers to compromise system integrity and availability.

The flaw resides in the processing of command parameters within the AOS-CX Command Line Interface. An attacker with low-level authenticated access can manipulate these parameters to inject malicious commands, which are then executed by the system with elevated privileges.

Successful exploitation poses a significant risk to network infrastructure, as it allows unauthorized command execution on critical networking hardware. Given the CVSS score of 8.8, this vulnerability could lead to total loss of confidentiality, integrity, and availability of the affected switch, potentially resulting in complete network disruption or unauthorized traffic redirection.

Immediate Action: Review the official Hewlett Packard Enterprise security advisory and apply the recommended firmware updates or patches as soon as they are made available for your specific AOS-CX version.

Proactive Monitoring: Monitor device access logs for unusual CLI activity or repeated command failures that may indicate an attacker attempting to probe or exploit input parameters.

Compensating Controls: Restrict administrative access to the management interfaces of AOS-CX devices to trusted management networks or jump hosts to minimize the exposure of the CLI to potentially compromised user accounts.

Public Exploit Available: Unknown

Organizations utilizing HPE AOS-CX should prioritize this vulnerability due to the high potential for system compromise. Administrators must verify their current firmware versions against the affected list and establish a maintenance window to apply vendor-supplied patches immediately upon release to prevent unauthorized control of network hardware.