Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2026-73778

Credential Manager Vulnerability Allows Unauthorized Administrative Access

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hpe

Description

A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote attacker could exploit this vulnerability on a device in its factory-default or post-ZTP state before any administrator has configured credentials by providing a predictable factory-default password. Successful exploitation could result in full administrative control of the affected device during the initial setup process.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hewlett Packard Enterprise (HPE) AOS-CX

Default version status: affected

  • 10.18.0000 to ≤ 10.18.0001affected
  • 10.17.0000 to ≤ 10.17.1021affected
  • 10.16.0000 to ≤ 10.16.1051affected
  • 10.13.0000 to ≤ 10.13.1180affected
  • 10.10.0000 to ≤ 10.10.1180affected

References