Buffer overflow in a vulnerable interface of HPE AOS‑S allows unauthenticated remote attackers to read sensitive memory contents and can also cause the device to crash. The flaw is reflected in a CVSS score of 9.1, indicating a high severity and significant potential impact on confidentiality, integrity, and availability. It is categorized under exploitation of improperly restricted operations within a memory buffer and exposure of information, aligning with the identified CWEs.

The vulnerability affects Hewlett Packard Enterprise AOS‑S Switches. No specific affected versions are listed in the data. Administrators should assume that all deployed AOS‑S builds are potentially impacted unless a patch or advisory explicitly indicates otherwise.

The CVSS rating of 9.1 places the issue in the high‑impact range. Although an EPSS score is not available, the absence of a KEV listing does not diminish the need for a quick response. Attackers can reach the vulnerable interface over the network without authentication, exploit the buffer overflow to read memory, and potentially trigger a denial of service. No public exploitation reports are cited, but the high severity and remote nature of the attack vector warrant immediate remedial action.