Vulnerability in the AOS-CX API endpoint could allow an unauthenticated remote actor to bypass existing authentication controls, enabling actions that are normally restricted to authorized users. The described bypass results from insufficient validation of API requests that permits the actor to invoke privileged operations. The CVE description does not explicitly state the consequences on network services, so the impact is limited to the potential manipulation of switch configuration or settings where privileged access is required.

The affected appliances are Hewlett Packard Enterprise AOS-CX network switches. No specific version information is provided in the advisory, so all releases of AOS-CX should be considered potentially vulnerable until a vendor update is published.

The CVSS score of 8.1 indicates a high severity potential impact; the EPSS score of less than 1% shows a low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog. Since the flaw can be exploited by unauthenticated entities over the network, the attack surface remains significant and administrators should treat the risk as high pending verifications of remediation availability.