A buffer overflow flaw exists in the underlying operating system of HPE Networking Instant On devices. The vulnerability allows a low‑privilege authenticated local attacker to corrupt memory and terminate the affected service, causing a denial‑of‑service condition. The flaw is a classic memory‑corruption weakness (CWE-119) that does not enable remote code execution, privilege escalation, or data exposure.

The affected system is Hewlett Packard Enterprise's Instant ON networking platform. The flaw resides in the operating system that underpins the device’s services. No specific firmware or OS version ranges are supplied in the advisory, so it is prudent to assume that all current installations are potentially vulnerable until a vendor‑supplied patch or newer firmware release is applied.

The CVSS score of 3.3 indicates low overall severity, and the EPSS score of < 1% reflects a very low probability of exploitation. The flaw requires local, authenticated access with low privileges, limiting the attack surface. The vulnerability is not listed in CISA’s Known Exploited Vulnerabilities catalog. Within a local network or administrative domain, a compromised account could trigger the buffer overflow and produce a service interruption, but no remote or elevated privilege execution is required.