A vulnerability exists in Hewlett Packard Enterprise AOS‑10’s web‑based management interface that allows an attacker to bypass authentication controls and execute arbitrary code with the privileges of the management service. The lack of a valid authentication step means that anyone who can reach the interface over the network can potentially gain full control of the affected device. Therefore, the principal impact is the compromise of confidentiality, integrity, and availability of the host, permitting remote attackers to run code, modify configuration, and potentially pivot to other assets.

The affected product is the AOS‑10 web‑based management interface delivered by Hewlett Packard Enterprise. No specific version numbers are listed; all deployments of the AOS‑10 interface are potentially vulnerable.

The CVSS score of 7.1 indicates a high overall risk, with the attack vector likely being network‑based and simply requiring access to the web interface. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog. Based on the information provided, an attacker can launch the exploit from any network location that can reach the interface, without needing credentials, making the exploitation path both straightforward and high‑impact.