The updated description states that an authenticated user with access to the web‑based management interface of a wireless network management system can execute remote code on the underlying operating system. By running arbitrary commands, an attacker could compromise system integrity and data security. The flaw seemingly requires authentication but permits remote code execution once those credentials are obtained, although the specific injection path or affected component details are not disclosed.

Affected systems are Hewlett Packard Enterprise ArubaOS (AOS) products that include a Wireless Network Management Interface. The specific product name and affected software versions are not disclosed, but any HPE device providing this management capability is potentially vulnerable unless it has been updated after the release of the advisory.

With a CVSS score of 7.2 the vulnerability is considered a high‑impact flaw. The EPSS score is less than 1%, and the vulnerability is not listed in the CISA KEV catalog. Since the flaw requires authentication, it may be exploitable by insiders or attackers who have obtained legitimate credentials. The combination of medium‑to‑high severity and a dependence on authorized access warrants prompt remediation.