Privilege Escalation in HPE Aruba Networking Fabric Composer
CVE-2025-23053

6.5MEDIUM

Key Information:

Vendor

HP (HP)

Status
HP Aruba Networking Fabric Composer (afc)
Vendor
CVE Published:
28 January 2025

What is CVE-2025-23053?

A vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer allows an authenticated low privilege operator user to alter certain system settings. This flaw can lead to privilege escalation, enabling unauthorized control over the affected system's configurations.

Affected Version(s)

HPE Aruba Networking Fabric Composer (AFC) 7.0.0 <= 7.1.0

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Colton Bachman of HPE Aruba Networking SIRT
.