This vulnerability is an unauthenticated adjacent buffer overflow that can lead to remote code execution. An attacker can, without authentication, provide input that overflows a buffer in an improperly bounded routine, allowing execution of arbitrary code. The weakness is a classic buffer overflow, classified as CWE‑120.

The affected vendor is Hewlett Packard Enterprise, but the specific product name and version are not disclosed in the available data. No version ranges are provided, so any HPE deployment that may include the vulnerable component should be investigated.

The CVSS base score of 9.6 indicates critical severity, and the EPSS score is not available, with no listing in the CISA KEV catalog. Because the vulnerability is described as unauthenticated, the implicit attack vector is likely external network access to the vulnerable service. Without a public exploit or patch details, the risk remains high for any exposed surface.