A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists. It could allow an unauthenticated adjacent attacker to conduct a packet forwarding attack against the ICMP and UDP protocol. For this attack to be successful an attacker requires a switch configuration that allows packets routing (at layer 3). Configurations that do not allow network traffic routing are not impacted. Successful exploitation could allow an attacker to bypass security policies, potentially leading to unauthorized data exposure.
References
| Link | Resource |
|---|---|
| https://csaf.arubanetworks.com/2024/hpe_aruba_networking_-_hpesbnw04772.txt | Broken Link |
| https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04772en_us&docLocale=en_US | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
22 Sep 2026, 19:55
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Hpe aruba Cx 10040 32p \(s4r54a\)
Hpe arubaos-cx Hpe aruba Cx 10000-48y6c \(r8p13a\) Hpe aruba Cx 10000-48y6c \(r8p14a\) Hpe aruba Cx 10040 \(s4r58a\) Hpe Hpe aruba Cx 10040 32p \(s4r56a\) Hpe aruba Cx 10000-48y6c \(s0f98a\) Hpe aruba Cx 10040 32p \(s4r55a\) |
|
| CPE | cpe:2.3:h:hpe:aruba_cx_10000-48y6c_\(r8p13a\):-:*:*:*:*:*:*:* cpe:2.3:h:hpe:aruba_cx_10040_32p_\(s4r56a\):-:*:*:*:*:*:*:* cpe:2.3:h:hpe:aruba_cx_10000-48y6c_\(s0f98a\):-:*:*:*:*:*:*:* cpe:2.3:h:hpe:aruba_cx_10040_\(s4r58a\):-:*:*:*:*:*:*:* cpe:2.3:h:hpe:aruba_cx_10000-48y6c_\(r8p14a\):-:*:*:*:*:*:*:* cpe:2.3:h:hpe:aruba_cx_10040_32p_\(s4r54a\):-:*:*:*:*:*:*:* cpe:2.3:h:hpe:aruba_cx_10040_32p_\(s4r55a\):-:*:*:*:*:*:*:* cpe:2.3:o:hpe:arubaos-cx:*:*:*:*:*:*:*:* |
|
| References | () https://csaf.arubanetworks.com/2024/hpe_aruba_networking_-_hpesbnw04772.txt - Broken Link | |
| References | () https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04772en_us&docLocale=en_US - Vendor Advisory |
Information
Published : 2025-01-08 21:15
Updated : 2026-09-22 19:55
NVD link : CVE-2024-54010
Mitre link : CVE-2024-54010
CVE.ORG link : CVE-2024-54010
JSON object : View
Products Affected
hpe
- aruba_cx_10040_32p_\(s4r55a\)
- aruba_cx_10040_32p_\(s4r56a\)
- aruba_cx_10000-48y6c_\(r8p14a\)
- aruba_cx_10040_32p_\(s4r54a\)
- aruba_cx_10000-48y6c_\(s0f98a\)
- arubaos-cx
- aruba_cx_10040_\(s4r58a\)
- aruba_cx_10000-48y6c_\(r8p13a\)
CWE
CWE-863
Incorrect Authorization