This vulnerability is an unauthenticated adjacent buffer overflow in the PAPI protocol that can expose sensitive information. The flaw allows an attacker to send crafted messages that overflow an internal buffer, enabling the extraction of data stored in adjacent memory. Because the attack does not require prior authentication, any user capable of communicating with the PAPI interface could potentially exploit the overflow to read information that should not be exposed. The CVSS score of 8.3 indicates a high severity by reflecting the impact on confidentiality, the remote reachability of the flaw, and moderate exploitation complexity.

The affected products are Hewlett Packard Enterprise devices running the AOS‑10 operating system. The PAPI protocol component in these systems is the specific target of the buffer overflow, but the exact model or firmware version affected is not specified in the available data.

The CVSS metric of 8.3 signals a significant risk, and the lack of an EPSS score means the public exploitation probability is not quantified but should still be treated as a concern given the high severity. Since the attack vector is inferred to be remote and unauthenticated, an attacker could exploit the bug from outside the network if the PAPI interface is reachable. The vulnerability is not currently listed in CISA KEV, suggesting no widely known exploitation at this time, but the high CVSS score warrants prompt investigation and containment measures.