← back
CVE-2025-27080

Authenticated Sensitive Information Disclosure exposes Credentials in AOS-CX Command Line Interface

CVSS 6 MEDIUMEPSS 0.2%CWE-359
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 6EPSS 0.2%KEV nãoPoC Nuclei Metasploit Patch
Lifecycle
18 Mar 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Vulnerabilities in the command line interface of AOS-CX could allow an authenticated remote attacker to expose sensitive information. Successful exploitation could allow an attacker to gain unauthorized access to services outside of the impacted switch, potentially leading to lateral movement involving those services.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →