FAIL › dossier
aruba cx 6300m 24 \(jl658a\)
PRODUCT· dossier confidence 0%
The HPE Aruba CX 6300M 24 switch exhibits a critical security posture due to multiple unpatched vulnerabilities in its AOS-CX operating system. These vulnerabilities include unauthenticated RCEs and management interface flaws, indicating systemic weaknesses that pose significant risk to defense-industrial-base networks.
PROFILE
CategorynetworkingWhat they doThe HPE Aruba CX 6300M 24 is a 24-port Layer 3 Ethernet switch featuring 24x10G SFP+ and 4xSFP56 interfaces.
SECURITY POSTURE
Critical security posture due to multiple unpatched vulnerabilities in the AOS-CX operating system, including unauthenticated RCEs and management interface flaws.
Notable failures
- CVE-2026-73749: Unauthenticated RCE via malformed input on AOS-CX daemons
- CVE-2026-73778: Credential Manager component vulnerability
- CVE-2026-23813: Web-based management interface vulnerability
Patterns: repeated unpatched edge-device RCEs; systemic weaknesses in underlying operating system
FAILURE HISTORY · 3
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2026-09-01 | CVE-2026-73749 | critical | An unauthenticated remote attacker can execute arbitrary code with elevated privileges on HPE AOS-CX daemons via malformed input. |
| 2026-09-01 | CVE-2026-73778 | high | CVE-2026-73778: A vulnerability exists in the Credential Manager component that may allow for un |
| 2026-03-11 | CVE-2026-23813 | critical | CVE-2026-23813: A vulnerability has been identified in the web-based management interface of AOS |
DOSSIER SOURCES
- HP JL658A - HP Aruba 6300M 24-Port Switch (24x10G SFP+, 4xSFP56 ... · www.renewtech.com
- Aruba CX6300M 16p 1G 8p Smart Rate 10G Class8 PoE 2p SFP56 50G 2p SFP28 ... · www.colamco.com
- HPE CX 6300 Layer 3 Switch - 48 Ports - Manageable - 10 Gigabit · www.compsource.com
- VisioCafe free visio stencils download site · www.visiocafe.com
- Aruba End-of-Life Dates | eol.network · eol.network
- CVE-2026-23816: AOS CX OS Command Injection (CVSS 7.2) | CVETodo · cvetodo.com
- CVE-2026-23813: AOS CX Improper Authentication | CVETodo · cvetodo.com
Open questions: What is the exact patch timeline for CVE-2026-73749? · Are there any known mitigations for CVE-2026-73778?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-26 04:51:48.159806+00:00