A buffer overflow flaw exists in the OnGuard agent of ClearPass Policy Manager that can be triggered by an authenticated local user. Exploitation would let the attacker run arbitrary code with elevated privileges on the host or disrupt the availability of the service. The weakness involves improper handling of input buffers, corresponding to a classic buffer overflow. The impact is that a local user who can install or run the OnGuard agent could gain administrative control or deny the service to legitimate users.

The OnGuard agent component of Hewlett Packard Enterprise ClearPass Policy Manager is affected. No specific product version is listed in the advisory; the vulnerability applies to versions that include the vulnerable component.

The CVSS score of 7.8 indicates a high severity vulnerability that is exploitable by a user with local authentication. An EPSS score of <1% indicates a very low, but non‑zero, probability of exploitation, yet the vulnerability is not currently listed in the CISA KEV catalog. Attackers would need local access, but once achieved, they can achieve arbitrary code execution or disruption of service.