A buffer overflow condition exists that can be triggered without authentication, allowing an attacker to cause an application crash and disrupt availability. The primary consequence is a denial‑of‑service where legitimate users cannot access the affected service. The vulnerability stems from inadequate bounds checking of input data (a classic buffer overflow).

The flaw is reported for an HPE system identified as AOS‑8, with the vendor noting the product as uncertain in the CNA data. It applies to the specific HPE configuration(s) that expose the vulnerable service, but the exact version details are not disclosed in the advisory.

The CVSS score of 8.2 indicates a high risk to availability. The EPSS score is not available, and the issue is not listed in the CISA KEV catalog, suggesting that while the flaw is serious, known active exploits have not yet been observed. The likely attack vector is remote exploitation, as the buffer overflow can be triggered without prior authentication. Given the lack of an official fix or workaround in the advisory, the threat remains present until a vendor patch or mitigation is deployed.