An unauthenticated adjacent vulnerability in Hewlett Packard Enterprise’s AOS-10 allows an attacker to execute arbitrary code on the target device. The lack of an official description in the advisory leaves details sparse, but the title indicates an unauthenticated remote code execution possibility. This flaw could lead to full compromise of the affected system, resulting in loss of confidentiality, integrity, and availability.

The vulnerability affects Hewlett Packard Enterprise devices that run AOS-10. The advisory does not specify particular sub‑products or versions beyond the AOS-10 reference, and the vendor did not identify a precise product name in the CNA data. Administrators should verify whether their network devices or management controllers run this version of AOS-10.

The CVSS score of 8.8 indicates a high severity level. The EPSS score is not provided, so current exploitation likelihood is unknown; however, the vulnerability being unauthenticated substantially elevates risk. The system is not listed in the CISA KEV catalog, but the severity warrants urgent attention. Based on the information given, the likely attack vector is remote, as the threat is described as an adjacent RCE that requires no credentials.