AOS‑S Switch contains a vulnerability that permits an unauthenticated remote attacker to read confidential data. The flaw exposes sensitive information, compromising confidentiality but not integrity or availability. The reported impact is limited to data exposure, enabling an attacker to obtain secrets that could be leveraged for further compromise.

The affected vendor is Hewlett Packard Enterprise and the product is AOS‑Switch (AOS‑S). No specific affected versions are listed; any deployment using the default or unpatched firmware is presumed vulnerable.

The CVSS score of 6.5 categorizes the weakness as moderate severity. EPSS is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting a lower public exploitation probability at present. The likely attack vector is remote, over the network, and does not require authentication; the attacker must be able to reach the device’s management interface or exploit a publicly exposed service.