Based on the title, a buffer overflow exists that can be triggered by an authenticated user, allowing arbitrary code execution. The vulnerability resides in an unnamed HPE AOS‑8 component and requires valid credentials to be exploited. No additional details are provided, so the exact scope of the corruption or the potential impact on confidentiality, integrity, or availability is unknown beyond the general risk of remote code execution.

The affected system is Hewlett Packard Enterprise AOS‑8. The vendor released the advisory for an unspecified product within this operating system family, and no version numbers are supplied. Organizations using any version of AOS‑8 should verify whether the update applies to their environment.

The CVSS score of 7.2 classifies this as a high severity vulnerability. The EPSS score is not available, but the absence of a listing in the CISA KEV catalog does not preclude exploitation. The likely attack vector is an authenticated session to the vulnerable service; a user with sufficient credentials can supply crafted input that overflows a buffer, potentially gaining arbitrary code execution privileges. The lack of publicly known exploits at this time suggests a moderate likelihood of immediate exploitation, but the high severity warrants proactive mitigation.