The CVE entry identifies an authenticated file write flaw in AOS‑10 that can lead to command injection. No detailed description is provided beyond the title, so the exact mechanics are not disclosed. From the title we know that an authenticated user may write arbitrary files and, as a result, execute unintended system commands, potentially compromising confidentiality, integrity, and availability of the appliance.

The vulnerability concerns Hewlett Packard Enterprise equipment running the AOS‑10 operating system. No specific product or version range is enumerated in the CVE entry, so any AOS‑10 installation that has not received the latest security update could be susceptible.

The CVSS score is 7.2, indicating a high severity level. EPSS information is not available, so the likelihood of exploitation cannot be quantified. The CISA KEV catalog does not list this vulnerability. The problem requires authentication; the most likely entry point would be through the network‑based management interface, but this is inferred rather than confirmed from the supplied data. An attacker with sufficient privileges could gain full control of the affected appliance by leveraging the command injection ability.