The advisory describes a command injection flaw in the AOS‑8 command line interface that is reachable through the PAPI protocol. An attacker who can send specially crafted packets to the PAPI UDP port 8211 can force the operating system to run arbitrary shell commands with privileged rights. This results in unauthenticated remote code execution that can compromise the confidentiality, integrity, and availability of the affected device. The weakness is a classic injection attack, identified as CWE‑77.

The vulnerability affects Hewlett Packard Enterprise ArubaOS AOS devices that expose the CLI over the network via the PAPI protocol. The affected product lineage is not limited to a specific model or firmware revision within the brief; version information is not supplied by the vendor. All installations in which the AOS‑8 CLI is enabled and reachable on port 8211 are considered vulnerable.

The flaw carries a CVSS base score of 8.8, indicating high severity. The EPSS score is <1 %, indicating that while the attack is technically feasible, its exploitation frequency is expected to be very low. The vulnerability is not recorded in the CISA Known Exploited Vulnerabilities catalog. The attack vector is remote over the network, requiring only connectivity to the PAPI endpoint, and no authentication is required. Because it allows unauthorized code execution on the host OS, the risk is substantial for any exposed system.