High-risk tools in Hpe Networking

High severity Hpe Networking MCP Server 48 of 595 tools

48 of the 595 tools in Hpe Networking are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

aos_s_ping Execute

Ping a destination from an AOS-S switch (async, polls ~60s).
aos_s_traceroute Execute

Run a traceroute from an AOS-S switch (async, polls ~60s).
aos8_apply_migration_run Execute

aos8_apply_migration_run
aos8_create_migration_run Execute

aos8_create_migration_run
aos8_migration_batch_plan Execute

aos8_migration_batch_plan
aos8_plan_migration_rollback Execute

aos8_plan_migration_rollback
aos8_show_command Execute

Run a read-only AOS8 `show ...` command through the showcommand API.
ap_http Execute

Test an HTTP GET from an AP's perspective (async, polls ~60s). timeout: 1-10s.
ap_https Execute

Test an HTTPS GET from an AP's perspective (async, polls ~60s). timeout: 1-10s.
ap_nslookup Execute

Resolve a hostname from an AP's perspective (async, polls ~60s).
ap_ping Execute

Ping a destination from an AP and return the result (async, polls ~60s).
ap_show Execute

Run 'show' commands on an AP (all must start with 'show ', max 20, async polls ~60s).
ap_tcp Execute

Test TCP connectivity to host:port from an AP (async, polls ~60s). timeout: 1-10s.
ap_traceroute Execute

Run a traceroute from an AP (async, polls ~60s).
apstra_wait_for_task Execute

Poll an Apstra blueprint task until it reaches a terminal state.
build_bgp_overlay Execute

build_bgp_overlay
build_ospf_overlay Execute

build_ospf_overlay
build_underlay_ssid Execute

build_underlay_ssid
build_vsf_template Execute

build_vsf_template
cable_test Execute

Run a cable/TDR test on CX or AOS-S switch ports (async, polls ~60s).
clearpass_disconnect_session Execute

Disconnect an active ClearPass session via Change of Authorization.
cx_ping Execute

Ping a destination from a CX switch and return the result (async, polls ~60s).
cx_show Execute

Run 'show' commands on a CX switch (all must start with 'show ', max 20, async polls ~60s).
cx_traceroute Execute

Run a traceroute from a CX switch (async, polls ~60s).
disconnect_client Execute

Force-disconnect a wireless client by MAC address. ap_serial auto-looked up if omitted.
edgeconnect_run_link_integrity_test Execute

Start an EdgeConnect link-integrity iperf/tcpperf test with write guards.
execute_config_health_remediation Execute

execute_config_health_remediation
gateway_iperf Execute

Run an iperf throughput test from an Aruba gateway (async, polls ~60s).
gateway_ping_sweep Execute

Run a ping sweep (a range of packet sizes) from an Aruba gateway (async, polls ~60s).
gateway_show Execute

Run 'show' commands on an Aruba gateway via async troubleshooting API. Each must start with 'show '.
invoke_tool Execute

invoke_tool
locate_aos_s_switch Execute

Blink an AOS-S switch's locate LED (POST .../locate).
locate_ap Execute

Blink an AP's locate LED (POST .../locate). Non-disruptive — no confirmation required.
locate_cx_switch Execute

Blink a CX switch's locate LED (POST .../locate).
poe_bounce Execute

Power-cycle PoE on switch/gateway ports (async, polls ~60s).
port_bounce Execute

Link-reset (bounce) switch/gateway ports (async, polls ~60s).
reboot_ap_swarm Execute

Reboot an entire AP swarm/cluster via one member's serial (POST .../rebootSwarm).
reboot_device Execute

Reboot an AP, CX switch, AOS-S switch, or gateway. device_type auto-detected if omitted.
resync_device_config Execute

resync_device_config
run_firmware_compliance_campaign Execute

run_firmware_compliance_campaign
run_glp_backup_protection_job Execute

run_glp_backup_protection_job
run_speed_test Execute

Run a speed test from an AP to measure uplink bandwidth.
run_troubleshooting_bundle Execute

run_troubleshooting_bundle
set_firmware_compliance Execute

Create or update a firmware compliance policy (triggers upgrade).
set_glp_virtual_machine_power Execute

set_glp_virtual_machine_power
set_glp_virtual_machines_power_bulk Execute

set_glp_virtual_machines_power_bulk
test_aaa Execute

Test AAA connectivity from an AP or CX switch (async, polls ~60s).
trigger_device_upgrade Execute

trigger_device_upgrade

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in Hpe Networking

Tools at high risk

Attacks that target this class

More on Hpe Networking

Enforce policy on every Hpe Networking tool call.