Memory corruption vulnerabilities are present in Hewlett Packard Enterprise’s AOS‑S switch firmware. An unauthenticated attacker who can reach the device from the same local network or shared resources can trigger the flaw, which may allow the execution of arbitrary code on the switch. This level of access could compromise the confidentiality, integrity, and availability of the device and any services it provides.

The vulnerability affects Hewlett Packard Enterprise’s AOS‑S switch firmware. Specific versions are not listed, so any deployment of the device running the current firmware may be vulnerable until a vendor‑issued patch is applied.

The CVSS score of 9.6 indicates critical severity. EPSS is not available, preventing a precise exploitation probability assessment, but the absence of the vulnerability from the CISA KEV catalog does not lower the threat. The attack vector is inferred to be local, requiring the attacker to be on the same network segment or adjacent to the switch, as the flaw is reachable only from such a position. If exploited, the attacker would achieve remote code execution, enabling full control over the switch and potential lateral movement within the network.