Denial-of-service vulnerabilities exist within the command line interface of AOS-CX, allowing a user who has successfully authenticated to disrupt the normal operation of the system. The impact is a loss of availability, with no direct threat to confidentiality or integrity.

The vulnerability affects Hewlett Packard Enterprise’s AOS-CX product. No specific version ranges are provided, so all deployment generations of AOS-CX that support a command line interface are potentially affected.

The CVSS score of 5.3 indicates moderate severity, and the EPSS score is not available, while the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is authenticated access to the command line interface, which an adversary could achieve through legitimate credentials. Because the flaw requires a known user context, the risk is realistic for environments where users can access the CLI, but overall exploitation probability remains uncertain due to missing EPSS data.