A buffer overflow in the HPE NonStop SNMP Trap Multiplexer can be triggered by a malformed SNMP trap, allowing an attacker to overwrite memory and execute arbitrary code with the privileges of the trap multiplexing process. The flaw is a classic stack overflow, classified as CWE-121. If exploited, the attacker could gain full control over the affected server, compromising confidentiality, integrity, and availability.

The vulnerability affects Hewlett Packard Enterprise’s HPE NonStop SNMP Trap Multiplexer. No specific affected versions are listed in the CVE entry, so any deployed instance of the product may be at risk until a patch is applied.

The CVSS score of 7.5 denotes high severity. The EPSS score of < 1% indicates a very low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog, suggesting no current known exploits. It is plausible that a remote attacker who can send SNMP traps to the multiplexer can trigger the overflow, though concrete attack details are not disclosed.