The CVE describes an unauthenticated buffer overflow in the affected interface of Hewlett Packard Enterprise’s AOS‑10 platform that can allow remote code execution. Successful exploitation could enable an attacker to run arbitrary code as a privileged user on the underlying operating system, leading to complete system compromise. No additional details are publicly documented.

Vulnerability applies to Hewlett Packard Enterprise’s AOS‑10 platform. No specific firmware or software version numbers are disclosed, so administrators should verify whether their deployments include AOS‑10 and consult HPE for applicable fixes.

The CVSS score of 10 indicates maximum severity. The EPSS score is 0.00499 (approximately 0.5%), and the issue is not listed in the CISA KEV catalog, implying no known public exploits yet. Nonetheless, because the flaw can be triggered remotely without authentication, the likelihood of a successful attack remains high once an exploit becomes available.