CVE-2026-63453
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
Buffer overflow vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation could allow a remote high-privileged user to execute arbitrary code as a privileged user on the underlying operating system.
Risk Assessment
An attacker with high privileges could gain full control over the operating system, impacting confidentiality, integrity, and availability.
Recommendation
Apply the patches provided by the vendor for AOS-CX immediately and restrict access to the command line interface to trusted users only.
Other vulnerabilities in AOS-CX
See all- CVE-2026-63454High
An authenticated path traversal vulnerability in AOS-CX allows copying arbitrary files to a user-readable location from the CLI of the underlying OS, potentially leading to remote code execution.
- CVE-2026-44880High
A buffer overflow vulnerability was found in the command line interface of AOS-CX. Successful exploitation could allow a remote low-privileged user to execute arbitrary code as a privileged user on the underlying operating system.
Original NVD description (English source)
Buffer overflow vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities could allow a remote high-privileged user to execute arbitrary code as a privileged user on the underlying operating system.