The vulnerability permits an unauthenticated remote attacker to trigger memory corruption in a service accessed via the PAPI protocol on AOS-8, which can lead to a denial-of-service condition. The public description does not detail specific mechanisms beyond the memory-corruption effect, but such corruption typically results in system instability or crashes. The likely attack vector is over an unauthenticated network channel to that service, although the exact service port is not documented.

Hewlett Packard Enterprise ArubaOS (AOS) version 8 is affected. No specific sub-product or version details beyond AOS-8 are provided.

The CVSS score of 7.5 indicates a high severity, and the EPSS score is < 1%. The vulnerability is not listed in the CISA KEV catalog, so known exploitation in the wild has not been reported. An attacker who can reach the vulnerable component could potentially cause repeated crashes, exhausting system resources and bringing the service down.