AOS-CX Switches contain a custom binary that can be invoked through the administrative CLI. The vulnerability allows an attacker with authenticated high privileges to exploit a command injection flaw. This results in arbitrary command execution on the host, granting the attacker full control over the system and the ability to tamper with configuration or data.

The affected product is Hewlett Packard Enterprise (HPE) AOS-CX Switches. No specific version range is provided in the CNA data, so all deployments using the affected binary are potentially vulnerable until a patch is applied.

The CVSS score is 7.2, indicating a high impact but not critical. EPSS is below 1%, suggesting a low likelihood of exploitation in the wild. The vulnerability is not in the CISA KEV catalog. Exploitation requires remote authentication and high privilege, making it strictly an authenticated attack vector.