The vulnerability is identified by the name "Unauthenticated Adjacent Sensitive Information Disclosure in AOS-10 Wi‑Fi Frame Processing" and carries a CVSS score of 9.3, indicating critical severity. No formal description is supplied; the only details come from the title, the marked high CVSS score, and the vendor reference. From the title, it can be inferred that an attacker who can transmit Wi‑Fi frames to the device, without needing authentication, may be able to read sensitive information that accompanies those frames, such as configuration data or payload contents. This information exposure compromises confidentiality but does not provide direct control or execution capabilities within the device.

The affected system is a Hewlett Packard Enterprise device; the vendor lists only an "AOS‑10 Wi‑Fi frame processing component" under an "Unknown product" classification. No specific product name or version details are provided, so any HPE device implementing the AOS‑10 Wi‑Fi frame processing feature can be considered vulnerable until a patch or update is applied.

With a CVSS score of 9.3 the vulnerability is categorized as critical. The EPSS score is not provided, and the vulnerability is not listed in the CISA KEV catalog, but the high score indicates significant potential damage if exploited. The likely attack vector involves an attacker sending malformed or malicious Wi‑Fi frames from any location with radio access to the device’s wireless interface. Because authentication is not required for exploitation, the barrier to attack is low, making the vulnerability attractive to adversaries who can operate at radio range. Given the severity and low technical barrier, operators should treat this exposure as an urgent risk.