The vulnerability is an authentication bypass in the HPE Networking Instant ON API endpoint that allows an attacker who is not authenticated to circumvent network access controls, provided certain preconditions beyond the attacker's control are met. This flaw can lead to an attacker obtaining unauthorized access to restricted networks, compromising confidentiality and integrity of sensitive data. The CVSS score of 8.1 reflects a high severity impact on both availability and misuse of network resources.

The affected product is Hewlett Packard Enterprise ( HPE) Instant ON. No specific version information is supplied in the advisory; the issue applies to any installed instance of the product that includes the vulnerable API endpoint.

The vulnerability carries a CVSS score of 8.1, indicating a high risk. The EPSS score is not provided, so the current probability of exploitation remains uncertain; however, the lack of KEV listing suggests no widely known exploits yet. Based on the description, the likely attack vector is remote, unauthenticated access to the API endpoint from the public internet, provided the required preconditions exist. An attacker would need to target the exposed API without valid credentials, exploiting the bypass logic to gain network access.