Based on the title, a buffer overflow exists that can be triggered by an authenticated user, allowing arbitrary code execution. The vulnerability resides in an unnamed HPE AOS‑8 component and requires valid credentials to be exploited. No additional details are provided, so the exact scope of the corruption or the potential impact on confidentiality, integrity, or availability is unknown beyond the general risk of remote code execution.

The affected system is Hewlett Packard Enterprise AOS‑8. The vendor released the advisory for an unspecified product within this operating system family, and no version numbers are supplied. Organizations using any version of AOS‑8 should verify whether the update applies to their environment.

The CVSS score of 7.2 classifies this vulnerability as high severity. The EPSS score of < 1% indicates a very low but nonzero probability of exploitation. Because the vulnerability is not listed in CISA's KEV catalog, no publicly known exploits have been documented yet. The likely attack vector is an authenticated session to the PAPI protocol; a user with elevated privileges can inject malformed input that overflows a buffer and achieves remote code execution. Due to the requirement for authentication and a privileged user role, the attack surface is limited to those with high‑level access, but the impact remains severe if exploited.