An unauthenticated Denial-of-Service vulnerability exists in the PAPI protocol of AOS‑8. Successful exploitation allows an attacker to disrupt the availability of the affected interface. The vulnerability does not require authentication and can be triggered by sending malicious requests to the PAPI interface.

The affected product is Hewlett Packard Enterprise AOS‑8. No specific version range is documented, so it is assumed that all releases including the PAPI protocol implementation are potentially vulnerable.

The CVSS score of 7.5 classifies this as a high severity issue. The EPSS score is < 1%, and the vulnerability is not listed in CISA’s KEV catalog. From the title alone it is inferred that the likely attack vector is remote network access to the PAPI interface and that no authentication is required to trigger the denial of service. Exploitation would involve repeatedly sending requests to the service, though no further technical details are provided.