An unauthenticated vulnerability in the PAPI protocol of AOS‑8 could allow an adjacent attacker to access limited information handled by the affected service and to disrupt the availability of the device. This flaw can lead to loss of confidentiality and availability of system resources.

The affected products are Hewlett Packard Enterprise AOS‑8 systems, although the specific model or firmware version is not listed. The vulnerability is linked to the PAPI protocol handling within this product family.

The CVSS score of 7.1 denotes a high severity level. EPSS score is < 1%, indicating a very low but non-zero exploitation probability, and the flaw is not currently listed in the CISA KEV catalog. The attack vector inferred from the title is a remote attacker exploiting the PAPI protocol, which is likely reachable over the network. The vulnerability is unauthenticated, meaning any networked user can attempt the exploit without requiring valid credentials; however, successful exploitation would require access to the PAPI interface exposed by the system.