The vulnerability is an authentication bypass (CWE‑288) in the AOS‑8 SSH daemon that allows an unauthenticated remote attacker to circumvent normal authentication controls. Upon successful exploitation, the attacker gains administrative privileges, enabling a full compromise of the host. This flaw undermines the confidentiality and integrity of the system and renders its SSH service ineffective in preventing unauthorized access.

HPE AOS‑8 SSH daemon is affected. No specific version information is provided in the CVE data.

The CVSS score of 9.8 indicates critical severity. The EPSS score of < 1% indicates a very low but nonzero probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog, suggesting no publicly known exploitation at present. The likely attack vector is remote via SSH, where an unauthenticated attacker may obtain full control after bypassing the authentication mechanism.