The vulnerability is a memory corruption issue in HPE NonStop SNMP Trap Multiplexer. A flaw allows an attacker to corrupt memory that could lead to arbitrary code execution or denial of service. The flaw is a stack-based buffer overflow, classified under CWE-121. Consequences can include loss of confidentiality, integrity, or availability of the affected system.

The affected product is Hewlett Packard Enterprise's HPE NonStop SNMP Trap Multiplexer. No specific version range is disclosed in the advisory, so all installations of this component should be considered vulnerable until the vendor issues a patch.

The CVSS score of 7.5 indicates a high severity, and the EPSS score is not available, so current exploitation probability cannot be quantified. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote via SNMP traps; an attacker who can send crafted SNMP trap requests to the multiplexer could trigger the memory corruption. Exploitation would require network access to the trap receiver and ability to send malicious SNMP traffic. The lack of a public exploit means that mitigations should focus on patching and restricting SNMP traffic.