CVE-2026-73780HIGH· 8.3MITRENVD대응게시일: 2026. 09. 01.수정일: 2026. 09. 04.CNA: security-alert@hpe.comAnalyzed
A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site Request Forgery (CSRF
CSRF
위협 신호 · CVSS · EPSS · KEV
정기 패치· 높은 악용 신호 없음
CVSS
8.3high
이론적 심각도 점수
EPSS
0.1%상위 96.7%
30일 내 악용 확률 예측
KEV
미등재실측 악용 기록 없음
권장 대응 기한14일 이내CISA SSVC 기준
2주 이내 패치 — 우선 조치 대상
완전 장악외부 노출· KEV 미등재 · 자동화 어려움 · 완전 장악 · 외부 노출
CVSS 벡터 · 메트릭
악용 경로
공격 벡터네트워크
공격 복잡도높음
필요 권한불필요
사용자 상호작용필요
범위변경
영향
기밀성 영향높음
무결성 영향높음
가용성 영향높음
버전별 점수
CVSS 3.18.3HIGH· 악용성 1.6· 영향도 6
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H약점 (CWE)
- CWE-352
사이트 간 요청 위조(CSRF) — 인증된 사용자를 속여 원치 않는 요청을 보내게 함.
상세 설명
A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site Request Forgery (CSRF) protection. This could allow a remote unauthenticated attacker to execute arbitrary input against the affected interface if the attacker can convince an authenticated user of the interface to interact with a specially crafted URL.
AI 심층 분석
공격 시나리오 · 재현 가능한 PoC 페이로드 · 즉시 적용 가능한 차단 패치를 한 번에 받아 보세요. 보안 운영팀이 그대로 점검·티켓팅에 쓸 수 있는 형태로 정리해 드립니다.
영향받는 제품·버전
- hpe arubaos-cx< 10.10.1180other
- hpe arubaos-cx10.13.0000 - 10.13.1180other
- hpe arubaos-cx10.16.0000 - 10.16.1051other
- hpe arubaos-cx10.17.0000 - 10.17.1021other
- hpe arubaos-cxother
- hpe aruba_cx_10000-48y6c_\(r8p13a\)other
- hpe aruba_cx_10000-48y6c_\(r8p14a\)other
- hpe aruba_cx_10000-48y6c_\(s0f98a\)other
- hpe aruba_cx_10040_\(s4r58a\)other
- hpe aruba_cx_10040_32p_\(s4r54a\)other
- hpe aruba_cx_10040_32p_\(s4r55a\)other
- hpe aruba_cx_10040_32p_\(s4r56a\)other
- hpe aruba_cx_4100i_12-port_\(jl817a\)other
- hpe aruba_cx_4100i_24-port_\(jl818a\)other
- hpe aruba_cx_6000_12g_\(r8n89a\)other
- hpe aruba_cx_6000_12p_\(r8n89b\)other
- hpe aruba_cx_6000_12p_\(s4r21a\)other
- hpe aruba_cx_6000_24g_\(r8n87a\)other
- hpe aruba_cx_6000_24g_\(r8n88a\)other
- hpe aruba_cx_6000_24p_\(r8n87b\)other
- hpe aruba_cx_6000_24p_\(r8n88b\)other
- hpe aruba_cx_6000_24p_\(s4r26a\)other
- hpe aruba_cx_6000_24p_\(s4r27a\)other
- hpe aruba_cx_6000_48g_\(r8n85a\)other
- hpe aruba_cx_6000_48g_\(r8n86a\)other
- hpe aruba_cx_6000_48g_\(r9y03a\)other
- hpe aruba_cx_6000_48p_\(r8n85b\)other
- hpe aruba_cx_6000_48p_\(r8n86b\)other
- hpe aruba_cx_6000_48p_\(r9y03b\)other
- hpe aruba_cx_6000_48p_\(s4r20a\)other
- hpe aruba_cx_6000_48p_\(s4r24a\)other
- hpe aruba_cx_6000_48p_\(s4r25a\)other
- hpe aruba_cx_6000_8p_\(s4r22a\)other
- hpe aruba_cx_6000_8p_\(s4r23a\)other
- hpe aruba_cx_6000_8p_\(s4r28a\)other
- hpe aruba_cx_6000_8p_\(s4r29a\)other
- hpe aruba_cx_6100_12g_\(jl679a\)other
- hpe aruba_cx_6100_24g_\(jl677a\)other
- hpe aruba_cx_6100_24g_\(jl678a\)other
- hpe aruba_cx_6100_48g_\(jl675a\)other
- hpe aruba_cx_6100_48g_\(jl676a\)other
- hpe aruba_cx_6100_48g_\(r9y04a\)other
- hpe aruba_cx_6200f_12g_\(r8q72a\)other
- hpe aruba_cx_6200f_12g_\(r8v13a\)other
- hpe aruba_cx_6200f_24g_\(jl724b\)other
- hpe aruba_cx_6200f_24g_\(jl725b\)other
- hpe aruba_cx_6200f_24g_\(s0g13a\)other
- hpe aruba_cx_6200f_24g_\(s0g14a\)other
- hpe aruba_cx_6200f_24g_\(s0m81a\)other
- hpe aruba_cx_6200f_24g_\(s0m82a\)other
- hpe aruba_cx_6200f_24g_\(s0m86a\)other
- hpe aruba_cx_6200f_24g_\(s0m87a\)other
- hpe aruba_cx_6200f_48g_\(jl726b\)other
- hpe aruba_cx_6200f_48g_\(jl727b\)other
- hpe aruba_cx_6200f_48g_\(jl728b\)other
- hpe aruba_cx_6200f_48g_\(s0g15a\)other
- hpe aruba_cx_6200f_48g_\(s0g16a\)other
- hpe aruba_cx_6200f_48g_\(s0g17a\)other
- hpe aruba_cx_6200f_48g_\(s0m83a\)other
- hpe aruba_cx_6200f_48g_\(s0m84a\)other
- hpe aruba_cx_6200f_48g_\(s0m85a\)other
- hpe aruba_cx_6200f_48g_\(s0m88a\)other
- hpe aruba_cx_6200f_48g_\(s0m89a\)other
- hpe aruba_cx_6200f_48g_\(s0m90a\)other
- hpe aruba_cx_6200m_24g_\(r8q67a\)other
- hpe aruba_cx_6200m_24g_\(r8q68a\)other
- hpe aruba_cx_6200m_24g_\(r8v08a\)other
- hpe aruba_cx_6200m_24g_\(r8v09a\)other
- hpe aruba_cx_6200m_36g_\(r8q71a\)other
- hpe aruba_cx_6200m_36g_\(r8v12a\)other
- hpe aruba_cx_6200m_48g_\(r8q69a\)other
- hpe aruba_cx_6200m_48g_\(r8q70a\)other
- hpe aruba_cx_6200m_48g_\(r8v10a\)other
- hpe aruba_cx_6200m_48g_\(r8v11a\)other
- hpe aruba_cx_6300f_24_\(jl666a\)other
- hpe aruba_cx_6300f_24_\(jl668a\)other
- hpe aruba_cx_6300f_24p_\(s0g96a\)other
- hpe aruba_cx_6300f_24p_\(s0g98a\)other
- hpe aruba_cx_6300f_48_\(jl665a\)other
- hpe aruba_cx_6300f_48_\(jl667a\)other
- hpe aruba_cx_6300f_48p_\(s0g95a\)other
- hpe aruba_cx_6300f_48p_\(s0g97a\)other
- hpe aruba_cx_6300m_16p_\(s4p41a\)other
- hpe aruba_cx_6300m_16p_\(s4p45a\)other
- hpe aruba_cx_6300m_24_\(jl658a\)other
- hpe aruba_cx_6300m_24_\(jl660a\)other
- hpe aruba_cx_6300m_24_\(jl662a\)other
- hpe aruba_cx_6300m_24_\(jl664a\)other
- hpe aruba_cx_6300m_24p_\(r8s89a\)other
- hpe aruba_cx_6300m_24p_\(r8s92a\)other
- hpe aruba_cx_6300m_24p_\(s0f99a\)other
- hpe aruba_cx_6300m_24p_\(s0g01a\)other
- hpe aruba_cx_6300m_24p_\(s0g03a\)other
- hpe aruba_cx_6300m_24p_\(s0g05a\)other
- hpe aruba_cx_6300m_24p_\(s4p44a\)other
- hpe aruba_cx_6300m_24p_\(s4p48a\)other
- hpe aruba_cx_6300m_24p_\(s5z46a\)other
- hpe aruba_cx_6300m_32p_\(s4p42a\)other
- hpe aruba_cx_6300m_32p_\(s4p46a\)other
- hpe aruba_cx_6300m_48_\(jl659a\)other
- hpe aruba_cx_6300m_48_\(jl661a\)other
- hpe aruba_cx_6300m_48_\(jl663a\)other
- hpe aruba_cx_6300m_48_\(jl762a\)other
- hpe aruba_cx_6300m_48p_\(r8s90a\)other
- hpe aruba_cx_6300m_48p_\(s0g00a\)other
- hpe aruba_cx_6300m_48p_\(s0g02a\)other
- hpe aruba_cx_6300m_48p_\(s0g04a\)other
- hpe aruba_cx_6300m_48p_\(s0g06a\)other
- hpe aruba_cx_6300m_48p_\(s0x44a\)other
- hpe aruba_cx_6300m_48p_\(s4p43a\)other
- hpe aruba_cx_6300m_48p_\(s4p47a\)other
- hpe aruba_cx_6300m_48sr5_\(r8s91a\)other
- hpe aruba_cx_6405_\(r0x26a\)other
- hpe aruba_cx_6405_48sfp\+8sfp56_\(r0x30a\)other
- hpe aruba_cx_6405_96g_\(r0x29a\)other
- hpe aruba_cx_6405_v2_\(r0x26c\)other
- hpe aruba_cx_6410_\(r0x27a\)other
- hpe aruba_cx_6410_96g_\(jl741a\)other
- hpe aruba_cx_6410_v2_\(r0x27c\)other
- hpe aruba_cx_8320_32_\(jl579a\)other
- hpe aruba_cx_8320_48_\(jl479a\)other
- hpe aruba_cx_8320_48_\(jl581a\)other
- hpe aruba_cx_8325-32c_\(jl626a\)other
- hpe aruba_cx_8325-32c_\(jl627a\)other
- hpe aruba_cx_8325-48y8c_\(jl624a\)other
- hpe aruba_cx_8325-48y8c_\(jl625a\)other
- hpe aruba_cx_8325-48y8c_\(jl858a\)other
- hpe aruba_cx_8325h-16c_\(s4b22a\)other
- hpe aruba_cx_8325h-16c_\(s4b24a\)other
- hpe aruba_cx_8325h-18y4c_\(s4b21a\)other
- hpe aruba_cx_8325h-18y4c_\(s4b23a\)other
- hpe aruba_cx_8325p-32c_\(s0g07a\)other
- hpe aruba_cx_8325p-32c_\(s0g08a\)other
- hpe aruba_cx_8360-12c_\(jl708c\)other
- hpe aruba_cx_8360-12c_\(jl709c\)other
- hpe aruba_cx_8360-16y2c_\(jl702c\)other
- hpe aruba_cx_8360-16y2c_\(jl703c\)other
- hpe aruba_cx_8360-24xf2c_\(jl710c\)other
- hpe aruba_cx_8360-24xf2c_\(jl711c\)other
- hpe aruba_cx_8360-32y4c_\(jl700c\)other
- hpe aruba_cx_8360-32y4c_\(jl701c\)other
- hpe aruba_cx_8360-48xt4c_\(jl706c\)other
- hpe aruba_cx_8360-48xt4c_\(jl707c\)other
- hpe aruba_cx_8360-48y6c_\(jl704c\)other
- hpe aruba_cx_8360-48y6c_\(jl705c\)other
- hpe aruba_cx_8400_\(jl376a\)other
- hpe aruba_cx_8400_8-slot_chassis_\(jl375a\)other
- hpe aruba_cx_9300_\(r8z97a\)other
- hpe aruba_cx_9300_\(r8z98a\)other
- hpe aruba_cx_9300_\(r8z99a\)other
- hpe aruba_cx_9300_\(r9a00a\)other
- hpe aruba_cx_9300_32d_\(r8z96a\)other
- hpe aruba_cx_9300_32d_\(r9a29a\)other
- hpe aruba_cx_9300_32d_\(r9a30a\)other
- hpe aruba_cx_9300s_32p_\(s0f81a\)other
- hpe aruba_cx_9300s_32p_\(s0f82a\)other
- hpe aruba_cx_9300s_32p_\(s0f83a\)other
- hpe aruba_cx_9300s_32p_\(s0f84a\)other
- hpe aruba_cx_9300s_32p_\(s0f87a\)other
- hpe aruba_cx_9300s_32p_\(s0f88a\)other
영향받는 구성 (CPE) 60
- hpe arubaos-cx≤ 10.10.1180cpe:2.3:o:hpe:arubaos-cx:*:*:*:*:*:*:*:*
- hpe arubaos-cx 10.18.0001cpe:2.3:o:hpe:arubaos-cx:10.18.0001:*:*:*:*:*:*:*
- hpe aruba_cx_10000-48y6c_(r8p13a)cpe:2.3:h:hpe:aruba_cx_10000-48y6c_\(r8p13a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_10000-48y6c_(r8p14a)cpe:2.3:h:hpe:aruba_cx_10000-48y6c_\(r8p14a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_10000-48y6c_(s0f98a)cpe:2.3:h:hpe:aruba_cx_10000-48y6c_\(s0f98a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_10040_(s4r58a)cpe:2.3:h:hpe:aruba_cx_10040_\(s4r58a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_10040_32p_(s4r54a)cpe:2.3:h:hpe:aruba_cx_10040_32p_\(s4r54a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_10040_32p_(s4r55a)cpe:2.3:h:hpe:aruba_cx_10040_32p_\(s4r55a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_10040_32p_(s4r56a)cpe:2.3:h:hpe:aruba_cx_10040_32p_\(s4r56a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_4100i_12-port_(jl817a)cpe:2.3:h:hpe:aruba_cx_4100i_12-port_\(jl817a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_4100i_24-port_(jl818a)cpe:2.3:h:hpe:aruba_cx_4100i_24-port_\(jl818a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6000_12g_(r8n89a)cpe:2.3:h:hpe:aruba_cx_6000_12g_\(r8n89a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6000_12p_(r8n89b)cpe:2.3:h:hpe:aruba_cx_6000_12p_\(r8n89b\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6000_12p_(s4r21a)cpe:2.3:h:hpe:aruba_cx_6000_12p_\(s4r21a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6000_24g_(r8n87a)cpe:2.3:h:hpe:aruba_cx_6000_24g_\(r8n87a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6000_24g_(r8n88a)cpe:2.3:h:hpe:aruba_cx_6000_24g_\(r8n88a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6000_24p_(r8n87b)cpe:2.3:h:hpe:aruba_cx_6000_24p_\(r8n87b\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6000_24p_(r8n88b)cpe:2.3:h:hpe:aruba_cx_6000_24p_\(r8n88b\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6000_24p_(s4r26a)cpe:2.3:h:hpe:aruba_cx_6000_24p_\(s4r26a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6000_24p_(s4r27a)cpe:2.3:h:hpe:aruba_cx_6000_24p_\(s4r27a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6000_48g_(r8n85a)cpe:2.3:h:hpe:aruba_cx_6000_48g_\(r8n85a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6000_48g_(r8n86a)cpe:2.3:h:hpe:aruba_cx_6000_48g_\(r8n86a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6000_48g_(r9y03a)cpe:2.3:h:hpe:aruba_cx_6000_48g_\(r9y03a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6000_48p_(r8n85b)cpe:2.3:h:hpe:aruba_cx_6000_48p_\(r8n85b\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6000_48p_(r8n86b)cpe:2.3:h:hpe:aruba_cx_6000_48p_\(r8n86b\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6000_48p_(r9y03b)cpe:2.3:h:hpe:aruba_cx_6000_48p_\(r9y03b\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6000_48p_(s4r20a)cpe:2.3:h:hpe:aruba_cx_6000_48p_\(s4r20a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6000_48p_(s4r24a)cpe:2.3:h:hpe:aruba_cx_6000_48p_\(s4r24a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6000_48p_(s4r25a)cpe:2.3:h:hpe:aruba_cx_6000_48p_\(s4r25a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6000_8p_(s4r22a)cpe:2.3:h:hpe:aruba_cx_6000_8p_\(s4r22a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6000_8p_(s4r23a)cpe:2.3:h:hpe:aruba_cx_6000_8p_\(s4r23a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6000_8p_(s4r28a)cpe:2.3:h:hpe:aruba_cx_6000_8p_\(s4r28a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6000_8p_(s4r29a)cpe:2.3:h:hpe:aruba_cx_6000_8p_\(s4r29a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6100_12g_(jl679a)cpe:2.3:h:hpe:aruba_cx_6100_12g_\(jl679a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6100_24g_(jl677a)cpe:2.3:h:hpe:aruba_cx_6100_24g_\(jl677a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6100_24g_(jl678a)cpe:2.3:h:hpe:aruba_cx_6100_24g_\(jl678a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6100_48g_(jl675a)cpe:2.3:h:hpe:aruba_cx_6100_48g_\(jl675a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6100_48g_(jl676a)cpe:2.3:h:hpe:aruba_cx_6100_48g_\(jl676a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6100_48g_(r9y04a)cpe:2.3:h:hpe:aruba_cx_6100_48g_\(r9y04a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6200f_12g_(r8q72a)cpe:2.3:h:hpe:aruba_cx_6200f_12g_\(r8q72a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6200f_12g_(r8v13a)cpe:2.3:h:hpe:aruba_cx_6200f_12g_\(r8v13a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6200f_24g_(jl724b)cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(jl724b\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6200f_24g_(jl725b)cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(jl725b\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6200f_24g_(s0g13a)cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(s0g13a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6200f_24g_(s0g14a)cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(s0g14a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6200f_24g_(s0m81a)cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(s0m81a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6200f_24g_(s0m82a)cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(s0m82a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6200f_24g_(s0m86a)cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(s0m86a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6200f_24g_(s0m87a)cpe:2.3:h:hpe:aruba_cx_6200f_24g_\(s0m87a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6200f_48g_(jl726b)cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(jl726b\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6200f_48g_(jl727b)cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(jl727b\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6200f_48g_(jl728b)cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(jl728b\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6200f_48g_(s0g15a)cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0g15a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6200f_48g_(s0g16a)cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0g16a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6200f_48g_(s0g17a)cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0g17a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6200f_48g_(s0m83a)cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0m83a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6200f_48g_(s0m84a)cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0m84a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6200f_48g_(s0m85a)cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0m85a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6200f_48g_(s0m88a)cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0m88a\):-:*:*:*:*:*:*:*
- hpe aruba_cx_6200f_48g_(s0m89a)cpe:2.3:h:hpe:aruba_cx_6200f_48g_\(s0m89a\):-:*:*:*:*:*:*:*
참고 자료 1
링크 내용 불러오는 중…