A command line interface (CLI) weakness in HPE AOS-CX Switches allows an authenticated remote attacker to execute arbitrary operating system commands, effectively providing remote code execution. The vulnerability is classified as a Command Injection (CWE‑78) and can compromise confidentiality, integrity, and availability of the device and any connected network resources.

The vulnerability impacts Hewlett Packard Enterprise AOS‑CX Switches. Specific affected product versions are not listed in the available data, so all currently deployed AOS‑CX firmware that has not been patched is potentially vulnerable.

The CVSS score is 7.2 (High), and the EPSS score is below 1%, indicating a relatively low probability that the vulnerability will be actively exploited in the wild. The vulnerability is not yet in the CISA KEV catalog. Exploitation requires authentication and remote access to the CLI, suggesting the attacker typically must gain legitimate credentials or use an existing authenticated session to proceed.