FAIL › dossier
aruba cx 6200m 24g \(r8v09a\)
PRODUCT· dossier confidence 20%
The HPE Aruba CX 6200M 24G switch exhibits a critical security posture due to multiple unpatched vulnerabilities in its AOS-CX operating system, including unauthenticated RCEs and management interface flaws. These vulnerabilities indicate systemic weaknesses in the underlying operating system, posing significant risk to defense-industrial-base networks.
PROFILE
CategorynetworkingWhat they doHPE Aruba CX 6200M 24G is a 24-port PoE+ managed switch running the AOS-CX operating system.
Websitehttps://www.arubanetworks.com ↗
SECURITY POSTURE
Critical security posture due to multiple unpatched vulnerabilities in the AOS-CX operating system, including unauthenticated RCEs and management interface flaws.
Notable failures
- CVE-2026-73749: unauthenticated RCE via malformed input on AOS-CX daemons
- CVE-2026-73778: vulnerability in Credential Manager component
- CVE-2026-23813: vulnerability in web-based management interface
Patterns: repeated unpatched edge-device RCEs; systemic weaknesses in underlying operating system; unauthenticated remote code execution
FAILURE HISTORY · 3
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2026-09-01 | CVE-2026-73749 | critical | An unauthenticated remote attacker can execute arbitrary code with elevated privileges on HPE AOS-CX daemons via malformed input. |
| 2026-09-01 | CVE-2026-73778 | high | CVE-2026-73778: A vulnerability exists in the Credential Manager component that may allow for un |
| 2026-03-11 | CVE-2026-23813 | critical | CVE-2026-23813: A vulnerability has been identified in the web-based management interface of AOS |
DOSSIER SOURCES
- HPE 6200M 48G Class4 PoE 4SFP+ Switch - 48 Ports - Manageable · www.compsource.com
- Factory Reset an Aruba Switch - Cognetic · community.cognetic.com
- oui :: MAC Address Search · oui.is
- VisioCafe free visio stencils download site · www.visiocafe.com
- Aruba End-of-Life Dates | eol.network · eol.network
- HP ProCurve End-of-Life Dates | eol.network · eol.network
- Time.is - exact time, any time zone · time.is
Open questions: What is the exact release date of the R8V09A firmware? · Are there any known mitigations for CVE-2026-73749?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-25 04:29:16.687620+00:00