The vulnerability allows an attacker who can reach the ArubaOS (AOS) command line interface without authenticating to read confidential data. It is inferred from the description that missing access controls in the CLI expose configuration and operational details, which could serve as footholds for further compromise. If an attacker obtains such information, they may leverage it to identify and attack additional network services supported by AOS‑10, potentially expanding the attack surface and compromising network infrastructure.

The affected product is Hewlett Packard Enterprise ArubaOS (AOS) version 10, specifically its command line interface component. Administrators should verify whether their AOS‑10 deployments expose a CLI that can be accessed without authentication, as the vulnerability permits reading configuration and other sensitive information through this interface.

It is inferred from the CVE description that attackers can exercise exploitation from any location that can reach the CLI, effectively performing unauthenticated remote access. The vulnerability carries a CVSS score of 9.6, reflecting severe risk when exploitation succeeds. EPSS is low, under 1%, indicating that, so far, exploitation is not widespread. The flaw is not listed in the CISA KEV catalog, suggesting no active exploit is known. Once the disclosure is achieved, attackers can extract information needed to pursue further network exploitation, though no additional privilege escalation is required to read the data.