An unauthenticated vulnerability in the Personnel Access Protocol Interface (PAPI) of AOS-8 allows an attacker to expose sensitive data from adjacent resources and to trigger a denial‑of‑service condition on the affected device. This flaw can lead to the loss of confidentiality and availability of system resources, potentially exposing configuration or operational data that should remain protected.

The affected products are Hewlett Packard Enterprise AOS‑8 systems, although the specific model or firmware version is not listed. The vulnerability is linked to the PAPI protocol handling within this product family.

The CVSS score of 7.1 denotes a high severity level. No EPSS score is available, and the flaw is not currently listed in the CISA KEV catalog. The attack vector inferred from the title is a remote attacker exploiting the PAPI protocol, which is likely reachable over the network. The vulnerability is unauthenticated, meaning any networked user can attempt the exploit without requiring valid credentials; however, successful exploitation would require access to the PAPI interface exposed by the system.