Impact
An authentication bypass flaw in Hewlett Packard Enterprise AOS-8 allows an attacker to gain unauthorized access and execute arbitrary code on the affected system. This vulnerability can compromise confidentiality, integrity, and availability by enabling remote command execution without valid credentials. The CVSS score of 8.5 reflects the high severity and the potential for hostile exploitation.
Affected Systems
The flaw affects Hewlett Packard Enterprise AOS-8. No specific version information is provided, so all releases of AOS-8 potentially remain at risk until a vendor patch is available. The vendor is listed as Hewlett Packard Enterprise (HPE).
Risk and Exploitability
The EPSS score is not available, and the vulnerability is not currently listed in the CISA KEV catalog, so the required expertise for exploitation is not publicly documented. The CVSS score indicates a high likelihood of successful exploitation if an attacker can reach the vulnerable system, likely via remote network interfaces such as web or management services. The attack vector is inferred to be remote, given the authentication bypass leading to code execution. No additional exploit conditions are explicitly stated in the data.
OpenCVE Enrichment