An unauthenticated attacker can trigger a denial of service by sending specially crafted network packets to the AOS-8 Network Management Service, causing its process to terminate unexpectedly and disrupting normal device operations. This loss of service availability directly affects the reliability of affected devices.

The vulnerability impacts Hewlett Packard Enterprise’s Aruba Networking Wireless Operating System, version AOS-8. No specific patch levels are listed, so all releases of this version are potentially affected.

Based on the description, it is inferred that the attack vector is remote, requiring network connectivity to the vulnerable service. The CVSS score of 7.5 indicates a moderate-to-high severity. Although no EPSS score is available, the vulnerability can be exercised simply by generating malicious packets from any remote host without authentication. It is not currently listed in the CISA KEV catalog, suggesting that public exploitation may not be widespread yet. An attacker only needs to send tailored packets to achieve a service crash.