FAIL › dossier
aruba cx 6200f 48g \(jl727b\)
PRODUCT· dossier confidence 0%
The HPE Aruba CX 6200F 48G switch exhibits a critical security posture due to multiple unpatched vulnerabilities in its AOS-CX operating system, including unauthenticated RCEs and management interface flaws. These vulnerabilities indicate systemic weaknesses in the underlying operating system, posing significant risk to defense-industrial-base networks.
PROFILE
CategorynetworkingWhat they doHPE Aruba CX 6200F 48G is a managed Ethernet switch featuring 48x1G BASE-T PoE ports, 4x SFP+ uplinks, and 370W PoE budget.
SECURITY POSTURE
Critical security posture due to multiple unpatched vulnerabilities in the AOS-CX operating system, including unauthenticated RCEs and management interface flaws.
Notable failures
- CVE-2026-73749: unauthenticated RCE via malformed input on AOS-CX daemons
- CVE-2026-73778: Credential Manager component vulnerability
- CVE-2026-23813: improper authentication in web-based management interface
Patterns: repeated unpatched edge-device RCEs; systemic weaknesses in underlying operating system; unauthenticated remote code execution
FAILURE HISTORY · 3
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2026-09-01 | CVE-2026-73749 | critical | An unauthenticated remote attacker can execute arbitrary code with elevated privileges on HPE AOS-CX daemons via malformed input. |
| 2026-09-01 | CVE-2026-73778 | high | CVE-2026-73778: A vulnerability exists in the Credential Manager component that may allow for un |
| 2026-03-11 | CVE-2026-23813 | critical | CVE-2026-23813: A vulnerability has been identified in the web-based management interface of AOS |
DOSSIER SOURCES
- HP JL727A - HP Aruba CX 6200F-48G PoE Switch (48x1G BASE-T PoE,4x · www.renewtech.com
- HPE Aruba Switch Price List 2026 - CX & Instant On | 748 Products · globalpricelist.com
- HPE Aruba Networking CX 6200F 48G Class-4 PoE 4SFP+ 370W (JL727B) · www.senetic.fi
- Aruba End-of-Life Dates | eol.network · eol.network
- Patch Feed - Security Patch Monitoring Dashboard for 60+ Vendors · patchfeed.dev
- CVE-2026-23813: AOS CX Improper Authentication | CVETodo · cvetodo.com
Open questions: What is the exact patch timeline for CVE-2026-73749? · Are there known exploit chains for the Credential Manager vulnerability?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-27 04:39:32.331286+00:00