Authenticated users can inject and execute arbitrary operating system commands on the affected HPE system, potentially compromising confidentiality, integrity, and availability of the host and connected services. The vulnerability likely requires valid credentials to access the susceptible interface, and it can be leveraged to gain system privileges or launch further attacks. In the absence of a detailed description, the analysis infers that the root cause is insufficient input validation of user-controlled command strings.

Hewlett Packard Enterprise’s AOS‑8 operating system is affected; the specific product variant is not detailed, but any deployment of AOS‑8 running the vulnerable component is at risk. No vendor‑specific version numbers are provided, so all releases of AOS‑8 may be impacted unless otherwise noted by HPE.

The CVSS score of 7.2 indicates a moderate to high severity, and the EPSS score is not available, making precise exploitation likelihood difficult to quantify. The vulnerability is not listed in CISA KEV, suggesting it has not yet been publicly exploited. The likely attack path requires an authenticated session, which limits the threat to users with legitimate access but still permits attackers who compromise credentials to launch arbitrary commands.