An unauthenticated file write vulnerability in the PAPI protocol of AOS-8 allows a remote attacker to write files without authentication. The write operations are limited but can alter files on the system, potentially disrupting the availability of the affected service. The primary impact is denial of service caused by non‑authenticating file modifications.

The flaw affects Hewlett Packard Enterprise ArubaOS (AOS) version AOS‑8. Specific product versions are not listed, and no version ranges were provided, so all releases of AOS‑8 are potentially vulnerable until a fixed version is released.

The Common Vulnerability Scoring System rate is 8.2, indicating high severity. The Exploit Probability Score is listed as < 1%, which indicates a very low but nonzero likelihood of exploitation. The vulnerability is not listed in CISA’s Known Exploited Vulnerabilities catalog. The attack vector is inferred to require remote network access to the PAPI interface; authentication is not required, and the impact is a service interruption across the affected host. No exploit code reference is published, but the potential for widespread disruption is the primary threat.