Search

Find a vulnerability

Search criteria

    5 vulnerabilities found for Private 5G Core by HPE Aruba Networking

    CERTFR-2026-AVI-0989

    Vulnerability from certfr_avis - Published: 2026-08-10 - Updated: 2026-08-10

    De multiples vulnérabilités ont été découvertes dans HPE Aruba Networking Private 5G Core. Elles permettent à un attaquant de provoquer une élévation de privilèges et un contournement de la politique de sécurité.

    Solutions

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    Impacted products
    Vendor Product Description
    HPE Aruba Networking Private 5G Core Private 5G Core versions antérieures à 1.26.1.3
    References

    Show details on source website
    To clipboard 

    {
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Private 5G Core versions ant\u00e9rieures \u00e0 1.26.1.3",
      "product": {
        "name": "Private 5G Core",
        "vendor": {
          "name": "HPE Aruba Networking",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-54763",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54763"
    },
    {
      "name": "CVE-2026-33377",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33377"
    }
  ],
  "initial_release_date": "2026-08-10T00:00:00",
  "last_revision_date": "2026-08-10T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0989",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-08-10T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans HPE Aruba Networking Private 5G Core. Elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges et un contournement de la politique de s\u00e9curit\u00e9.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans HPE Aruba Networking Private 5G Core",
  "vendor_advisories": [
    {
      "published_at": "2026-08-07",
      "title": "Bulletin de s\u00e9curit\u00e9 HPE Aruba Networking HPESBNW05119",
      "url": "https://csaf.arubanetworking.hpe.com/2026/hpe_aruba_networking_-_hpesbnw05119.txt"
    }
  ]
}

    CERTFR-2026-AVI-0908

    Vulnerability from certfr_avis - Published: 2026-07-22 - Updated: 2026-07-22

    De multiples vulnérabilités ont été découvertes dans les produits HPE Aruba Networking. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et un contournement de la politique de sécurité.

    Solutions

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    Impacted products
    Vendor Product Description
    HPE Aruba Networking AOS-CX AOS-CX versions 10.17.x antérieures à 10.17.1021
    HPE Aruba Networking ECOS EdgeConnect SD-WAN Gateway (ECOS) versions 9.4.x antérieures à ECOS-9.4.7.0
    HPE Aruba Networking Private 5G Core Private 5G Core versions antérieures à 1.26.1.2
    HPE Aruba Networking ECOS EdgeConnect SD-WAN Gateway (ECOS) versions 9.6.x antérieures à ECOS-9.6.2.0
    HPE Aruba Networking ECOS EdgeConnect SD-WAN Gateway (ECOS) versions 9.5.x antérieures à ECOS-9.5.7.0
    HPE Aruba Networking ECOS EdgeConnect SD-WAN Gateway (ECOS) versions 9.7.x antérieures à ECOS-9.7.0.0
    HPE Aruba Networking AOS-CX AOS-CX versions 10.18.x antérieures à 10.18.0001
    HPE Aruba Networking AOS-CX AOS-CX versions 10.13.x antérieures à 10.13.1180
    HPE Aruba Networking AOS-CX AOS-CX versions 10.16.x antérieures à 10.16.1051
    References

    Show details on source website
    To clipboard 

    {
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "AOS-CX versions 10.17.x ant\u00e9rieures \u00e0 10.17.1021",
      "product": {
        "name": "AOS-CX",
        "vendor": {
          "name": "HPE Aruba Networking",
          "scada": false
        }
      }
    },
    {
      "description": "EdgeConnect SD-WAN Gateway (ECOS) versions 9.4.x ant\u00e9rieures \u00e0 ECOS-9.4.7.0",
      "product": {
        "name": "ECOS",
        "vendor": {
          "name": "HPE Aruba Networking",
          "scada": false
        }
      }
    },
    {
      "description": "Private 5G Core versions ant\u00e9rieures \u00e0 1.26.1.2",
      "product": {
        "name": "Private 5G Core",
        "vendor": {
          "name": "HPE Aruba Networking",
          "scada": false
        }
      }
    },
    {
      "description": "EdgeConnect SD-WAN Gateway (ECOS) versions 9.6.x ant\u00e9rieures \u00e0 ECOS-9.6.2.0",
      "product": {
        "name": "ECOS",
        "vendor": {
          "name": "HPE Aruba Networking",
          "scada": false
        }
      }
    },
    {
      "description": "EdgeConnect SD-WAN Gateway (ECOS) versions 9.5.x ant\u00e9rieures \u00e0 ECOS-9.5.7.0",
      "product": {
        "name": "ECOS",
        "vendor": {
          "name": "HPE Aruba Networking",
          "scada": false
        }
      }
    },
    {
      "description": "EdgeConnect SD-WAN Gateway (ECOS) versions 9.7.x ant\u00e9rieures \u00e0 ECOS-9.7.0.0",
      "product": {
        "name": "ECOS",
        "vendor": {
          "name": "HPE Aruba Networking",
          "scada": false
        }
      }
    },
    {
      "description": "AOS-CX versions 10.18.x ant\u00e9rieures \u00e0 10.18.0001",
      "product": {
        "name": "AOS-CX",
        "vendor": {
          "name": "HPE Aruba Networking",
          "scada": false
        }
      }
    },
    {
      "description": "AOS-CX versions 10.13.x ant\u00e9rieures \u00e0 10.13.1180",
      "product": {
        "name": "AOS-CX",
        "vendor": {
          "name": "HPE Aruba Networking",
          "scada": false
        }
      }
    },
    {
      "description": "AOS-CX versions 10.16.x ant\u00e9rieures \u00e0 10.16.1051",
      "product": {
        "name": "AOS-CX",
        "vendor": {
          "name": "HPE Aruba Networking",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-63454",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63454"
    },
    {
      "name": "CVE-2026-44879",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44879"
    },
    {
      "name": "CVE-2026-44878",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44878"
    },
    {
      "name": "CVE-2026-44880",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44880"
    },
    {
      "name": "CVE-2026-48020",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48020"
    },
    {
      "name": "CVE-2026-35387",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-35387"
    },
    {
      "name": "CVE-2026-63453",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63453"
    }
  ],
  "initial_release_date": "2026-07-22T00:00:00",
  "last_revision_date": "2026-07-22T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0908",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-07-22T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits HPE Aruba Networking. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un contournement de la politique de s\u00e9curit\u00e9.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits HPE Aruba Networking",
  "vendor_advisories": [
    {
      "published_at": "2026-07-21",
      "title": "Bulletin de s\u00e9curit\u00e9 HPE Aruba Networking HPESBNW05013",
      "url": "https://csaf.arubanetworking.hpe.com/2026/hpe_aruba_networking_-_hpesbnw05013.txt"
    },
    {
      "published_at": "2026-07-21",
      "title": "Bulletin de s\u00e9curit\u00e9 HPE Aruba Networking HPESBNW05083",
      "url": "https://csaf.arubanetworking.hpe.com/2026/hpe_aruba_networking_-_hpesbnw05083.txt"
    },
    {
      "published_at": "2026-07-22",
      "title": "Bulletin de s\u00e9curit\u00e9 HPE Aruba Networking HPESBNW05081",
      "url": "https://csaf.arubanetworking.hpe.com/2026/hpe_aruba_networking_-_hpesbnw05081.txt"
    }
  ]
}

    CERTFR-2026-AVI-0846

    Vulnerability from certfr_avis - Published: 2026-07-08 - Updated: 2026-07-08

    De multiples vulnérabilités ont été découvertes dans les produits HPE Aruba Networking. Elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et un contournement de la politique de sécurité.

    Solutions

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    Impacted products
    Vendor Product Description
    HPE Aruba Networking Private 5G Core Private 5G Core versions antérieures à 1.26.1.1
    HPE Aruba Networking Instant On HPE Networking Instant On Switch models 1830, 1930, and 1960 versions antérieures à 3.4.0
    References

    Show details on source website
    To clipboard 

    {
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Private 5G Core versions ant\u00e9rieures \u00e0 1.26.1.1",
      "product": {
        "name": "Private 5G Core",
        "vendor": {
          "name": "HPE Aruba Networking",
          "scada": false
        }
      }
    },
    {
      "description": "HPE Networking Instant On Switch models 1830, 1930, and 1960 versions ant\u00e9rieures \u00e0 3.4.0",
      "product": {
        "name": "Instant On",
        "vendor": {
          "name": "HPE Aruba Networking",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-40912",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40912"
    },
    {
      "name": "CVE-2026-44877",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44877"
    },
    {
      "name": "CVE-2026-39806",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39806"
    },
    {
      "name": "CVE-2026-39803",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39803"
    }
  ],
  "initial_release_date": "2026-07-08T00:00:00",
  "last_revision_date": "2026-07-08T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0846",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-07-08T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits HPE Aruba Networking. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un contournement de la politique de s\u00e9curit\u00e9.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits HPE Aruba Networking",
  "vendor_advisories": [
    {
      "published_at": "2026-07-07",
      "title": "Bulletin de s\u00e9curit\u00e9 HPE Aruba Networking HPESBNW05077",
      "url": "https://csaf.arubanetworking.hpe.com/2026/hpe_aruba_networking_-_hpesbnw05077.txt"
    },
    {
      "published_at": "2026-07-07",
      "title": "Bulletin de s\u00e9curit\u00e9 HPE Aruba Networking HPESBNW05038",
      "url": "https://csaf.arubanetworking.hpe.com/2026/hpe_aruba_networking_-_hpesbnw05038.txt"
    }
  ]
}

    CERTFR-2026-AVI-0402

    Vulnerability from certfr_avis - Published: 2026-04-08 - Updated: 2026-04-08

    Une vulnérabilité a été découverte dans HPE Aruba Networking Private 5G Core. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.

    Solutions

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    Impacted products
    Vendor Product Description
    HPE Aruba Networking Private 5G Core Aruba Networking Private 5G Core versions antérieures à 1.25.3.1
    References

    Show details on source website
    To clipboard 

    {
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Aruba Networking Private 5G Core versions ant\u00e9rieures \u00e0 1.25.3.1",
      "product": {
        "name": "Private 5G Core",
        "vendor": {
          "name": "HPE Aruba Networking",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-23818",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23818"
    }
  ],
  "initial_release_date": "2026-04-08T00:00:00",
  "last_revision_date": "2026-04-08T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0402",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-04-08T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans HPE Aruba Networking Private 5G Core. Elle permet \u00e0 un attaquant de provoquer un contournement de la politique de s\u00e9curit\u00e9.",
  "title": "Vuln\u00e9rabilit\u00e9 dans HPE Aruba Networking Private 5G Core",
  "vendor_advisories": [
    {
      "published_at": "2026-04-07",
      "title": "Bulletin de s\u00e9curit\u00e9 HPE Aruba Networking HPESBNW05032",
      "url": "https://csaf.arubanetworking.hpe.com/2026/hpe_aruba_networking_-_hpesbnw05032.txt"
    }
  ]
}

    CERTFR-2025-AVI-0484

    Vulnerability from certfr_avis - Published: 2025-06-10 - Updated: 2025-06-10

    Une vulnérabilité a été découverte dans HPE Aruba Networking Private 5G Core. Elle permet à un attaquant de provoquer une atteinte à la confidentialité des données.

    Solutions

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    Impacted products
    Vendor Product Description
    HPE Aruba Networking Private 5G Core HPE Aruba Networking Private 5G Core versions postérieures à 1.24.1.0 et antérieures à 1.25.1.1
    References

    Show details on source website
    To clipboard 

    {
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "HPE Aruba Networking Private 5G Core versions post\u00e9rieures \u00e0 1.24.1.0 et ant\u00e9rieures \u00e0 1.25.1.1",
      "product": {
        "name": "Private 5G Core",
        "vendor": {
          "name": "HPE Aruba Networking",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-37100",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-37100"
    }
  ],
  "initial_release_date": "2025-06-10T00:00:00",
  "last_revision_date": "2025-06-10T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-0484",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-06-10T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans HPE Aruba Networking Private 5G Core. Elle permet \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits HPE Aruba Networking",
  "vendor_advisories": [
    {
      "published_at": "2025-06-09",
      "title": "Bulletin de s\u00e9curit\u00e9 HPE Aruba Networking HPESBNW04883",
      "url": "https://csaf.arubanetworks.com/2025/hpe_aruba_networking_-_hpesbnw04883.txt"
    }
  ]
}