CVE-2025-25042

CVE-2025-25042 affects HPE AOS-CX devices via the REST interface. An authenticated, low-privilege user can read encrypted credentials of other users on the switch, exposing sensitive information and potentially enabling further access. The CVSS v3.1 base score is 4.3 (Medium) with network attack ...

CVE-2025-25042 Authenticated Access Control Vulnerability allows Sensitive Information Disclosure in AOS-CX REST Interface

A vulnerability in the AOS-CX REST interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation could allow an attacker to read encrypted credentials of other users on the switch, potentially leading to further unauthorized acce...

CVE-2025-25040 Failure to Properly Enforce Port ACLs on CPU generated packets in CX 9300 Switches

A vulnerability has been identified in the port ACL functionality of AOS-CX software running on the HPE Aruba Networking CX 9300 Switch Series only and affects: - AOS-CX 10.14.xxxx : All patches - AOS-CX 10.15.xxxx : 10.15.1000 and below The vulnerability is specific to traffic originated by the ...

CVE-2025-25040

CVE-2025-25040 affects HPE Aruba CX 9300 CX-9300 switches running AOS-CX. The issue is in port ACL enforcement on routed ports for egress traffic, allowing bypass of ACLs and potential unauthorized traffic flow. Affected: AOS-CX 10.14.xxxx (all patches) and 10.15.xxxx (10.15.1000 and below). Not ...

Hewlett Packard Enterprise AOS-CX（HPE AOS-CX） 安全漏洞

Hewlett Packard Enterprise AOS-CX HPE AOS-CX is a network operating system for data centers, campuses, and edges from Hewlett Packard Enterprise, Inc. It is used to provide flexible and innovative network services and enhance network performance. A security vulnerability exists in Hewlett Packard...

CVE-2025-0591

Out-of-bounds Read vulnerability CWE-125 was found in CX-Programmer. Attackers may be able to read sensitive information or cause an application crash by abusing this vulnerability...

Out-of-bounds read vulnerability in OMRON CX-Programmer

Overview CX-Programmer provided by OMRON Corporation contains an out-of-bounds read vulnerability CWE-125, CVE-2025-0591. Michael Heinzl reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact Having a user open a specially crafted file may lead to information...

CVE-2025-0591

Out-of-bounds Read vulnerability CWE-125 was found in CX-Programmer. Attackers may be able to read sensitive information or cause an application crash by abusing this vulnerability...

CVE-2025-0591 Out-of-bounds Read vulnerability in CX-Programmer

Out-of-bounds Read vulnerability CWE-125 was found in CX-Programmer. Attackers may be able to read sensitive information or cause an application crash by abusing this vulnerability...

CVE-2025-0591

CVE-2025-0591 is an out-of-bounds read (CWE-125) vulnerability in OMRON CX-Programmer that can lead to information disclosure or application crash. Affected component is CX-Programmer (and related CX-One packaging per sources). Practical impact is read of sensitive data or a crash when processing...

CVE-2025-0591 Out-of-bounds Read vulnerability in CX-Programmer

Out-of-bounds Read vulnerability CWE-125 was found in CX-Programmer. Attackers may be able to read sensitive information or cause an application crash by abusing this vulnerability...

PT-2025-6793 · Unknown · Cx-Programmer

Name of the Vulnerable Software and Affected Versions: CX-Programmer versions 9.83 or lower Description: A vulnerability was found in CX-Programmer, allowing attackers to read sensitive information or cause an application crash by exploiting an out-of-bounds read issue. This could lead to...

Omron CX-Programmer 缓冲区错误漏洞

Omron CX-Programmer is a PLC Programmable Logic Controller programming software from Omron Japan. A buffer error vulnerability exists in Omron CX-Programmer, which originates from an out-of-bounds read and could lead to information disclosure or a crash...

Malicious code in cx-logger-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6b28a94d9596485fc3cbfce584a9426d5bda8075bb0a4cb226482d7f6eccb35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-818 Malicious code in cx-logger-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6b28a94d9596485fc3cbfce584a9426d5bda8075bb0a4cb226482d7f6eccb35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the switch network firewall for HPE CX 10000 corporate networks allows a intruder to disclose protected information.

The vulnerability of the switch network firewalls for HPE CX 10000 corporate networks is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

WordPress plugin Coupon X 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-1777 · WordPress · The Coupon X: Discount Pop Up

Name of the Vulnerable Software and Affected Versions: The Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups plugin for WordPress versions up to, and including, 1.3.5 Description: The issue is related to missing capability checks on several functions in the...

CVE-2024-54010

A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists. It could allow an unauthenticated adjacent attacker to conduct a packet forwarding attack against the ICMP and UDP protocol. For this attack to be successful an attacker requires a switch...

CVE-2024-54010

CVE-2024-54010 describes a vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches. An unauthenticated adjacent attacker could perform a packet forwarding attack against ICMP and UDP if the switch is configured to allow Layer 3 routing. The attack relies on routin...