The vulnerability is a buffer overflow that can be triggered without authentication, allowing an attacker to bypass authentication controls in the AOS-8 product. This permits the attacker to assume any user role, potentially compromising confidentiality and integrity of the system. The description is limited, but the advisory indicates the primary impact is an authentication bypass via a buffer overflow flaw.

The affected vendor is Hewlett Packard Enterprise, with the specific product not listed in the advisory. No affected version information is included in the advisory; therefore, version details are unknown.

The CVSS score of 9.8 indicates a critical severity classification. The lack of an EPSS score does not diminish the high potential for exploitation; the vulnerability can be triggered without authentication, implying a remote exploitation path. Although it is not yet listed in CISA’s KEV catalogue, the combination of high severity and the possibility of unrestricted access makes this issue a high priority for remediation.