The OnGuard agent component of HPE ClearPass Policy Manager contains a flaw that allows an authenticated local user to trigger a service interruption. Successful exploitation causes the agent to become unresponsive, potentially halting network access control operations for the system it protects. The weakness is a form of uncontrolled resource consumption that leads to denial of service.

The vulnerability affects Hewlett Packard Enterprise ClearPass Policy Manager, specifically the OnGuard agent. No version restrictions are listed, so all installations that include the OnGuard agent are potentially impacted.

With a CVSS score of 6.1, the vulnerability is deemed moderate severity. The EPSS score of 0.00093 (< 1%) indicates a very low exploitation probability, and it is not listed in the CISA KEV catalog, so the likelihood of widespread exploitation is unclear. Because authentication is required, an attacker must have local access, which could arise from a compromised or privileged user, or physical access to the device. A local attacker could terminate the agent service, leading to a denial of network connectivity for users relying on ClearPass policy enforcement.