Impact
According to the official title, the vulnerability involves unauthenticated memory corruption that can cause a denial of service in Hewlett Packard Enterprise's AOS‑10 operating system. Because no detailed description is provided, this understanding is inferred from the title and the available CVSS score. The memory corruption could allow an attacker to craft malformed input that corrupts internal state, forcing the affected service to crash and denying legitimate users access.
Affected Systems
Hewlett Packard Enterprise's AOS‑10 operating system is affected. The vendor has not identified a specific product or version number, so the exact scope is unclear. Administrators should verify whether their devices run AOS‑10 and determine whether the vulnerable component is present. This lack of product detail means the attack may potentially impact a broad range of deployments.
Risk and Exploitability
The CVSS score of 7.5 indicates high severity. The EPSS score is not available, and the vulnerability is not listed in CISA KEV. Based on the information, the likely attack vector is remote and unauthenticated; the attacker can send crafted input from an untrusted network to trigger the memory corruption. This suggests a potential for exploitation over the network, making the risk significant, especially in environments where AOS‑10 provides critical network services.
OpenCVE Enrichment