The vulnerability is a buffer overflow (CWE-122) in HPE NonStop TNS/X Native Inspect that can corrupt an address and potentially redirect the instruction pointer. An attacker that succeeds in exploiting this flaw could gain control over the affected process, enabling remote code execution or unauthorized modification of data. The impact could compromise confidentiality, integrity, and availability of the affected system.

The affected software is Hewlett Packard Enterprise HPE NonStop TNS/X Native Inspect. No specific product versions were listed in the advisory.

The CVSS score of 7.1 indicates a moderate to high severity. The EPSS score of less than 1% suggests a low probability of exploitation at present. The vulnerability is not listed in the CISA KEV catalog. Remote exploitation would presumably require network access to the TNS/X Native Inspect service; the exact attack vector is not specified in the advisory and is therefore inferred from the product’s network-facing nature.