Authentication bypass vulnerabilities in the affected interface of Hewlett Packard Enterprise ArubaOS (AOS) version 8 allow an unauthenticated adjacent attacker to bypass existing authentication controls, giving the attacker administrative privileges. With those privileges, an attacker can modify system configurations and access or manipulate sensitive data, resulting in a complete compromise of the affected system.

Affected systems are Hewlett Packard Enterprise ArubaOS (AOS) deployments running the AOS-8 operating environment. Specific affected version numbers are not provided in the advisory, so all installations of AOS-8 should be considered potentially vulnerable until a vendor-specified fix is released.

The CVSS score of 9.6 categorizes the vulnerability as critical, indicating that the risk to confidentiality, integrity, and availability is severe. The EPSS score is listed as < 1 %, which suggests that the likelihood of exploitation in the wild is very low, and the vulnerability is not currently listed in the CISA Known Exploited Vulnerabilities catalog. The attack vector inferred from the description involves bypassing authentication controls; thus it likely requires network access to the affected services, especially those exposed to adjacent network segments, although the advisory does not describe the precise exploitation method.