Description
An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected interface, along with limited access to or modification of some system data.
Published: 2026-10-22
Score: 7 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service via unauthenticated buffer overflow
Action: Apply Patch
AI Analysis

Impact

This vulnerability is an unauthenticated buffer overflow in the AOS‑8 command line interface. An attacker who can reach the interface remotely could overflow a buffer, potentially causing the CLI to crash and disrupting availability of the affected interface. The description also notes that successful exploitation may provide limited access to or modification of some system data. The weakness is identified as CWE‑119.

Affected Systems

The affected system is Hewlett Packard Enterprise’s AOS‑8 product, specifically the command line interface module. No specific product or version identifiers were supplied, and the vendor lists the product as unknown.

Risk and Exploitability

The CVSS score of 7.0 reflects high severity for a denial‑of‑service flaw. The EPSS score <1% indicates a low exploitation probability; the vulnerability is not listed in the CISA KEV catalog. Because the vulnerability is unauthenticated, the attack could be launched remotely over the network to the CLI. The high CVSS score and availability impact indicate a significant risk to operational continuity if not remediated.

Generated by OpenCVE AI on October 23, 2026 at 21:12 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Check Hewlett Packard Enterprise’s support portal for available updates or patches for the AOS‑8 CLI and apply them promptly.
  • If a patch is not yet available, restrict access to the CLI by applying network ACLs or firewall rules to limit untrusted connections; consider disabling unused management interfaces to reduce exposure.
  • If a patch is unavailable, isolate the AOS‑8 CLI system from public networks or place it behind a dedicated firewall to limit exposure until a fix is released.

Generated by OpenCVE AI on October 23, 2026 at 21:12 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 26 Oct 2026 19:30:00 +0000

Type Values Removed Values Added
First Time appeared Hpe
Hpe aos
Vendors & Products Hpe
Hpe aos

Fri, 23 Oct 2026 19:30:00 +0000

Type Values Removed Values Added
Description No description provided An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected interface, along with limited access to or modification of some system data.

Fri, 23 Oct 2026 19:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-120
CWE-287

Fri, 23 Oct 2026 16:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-119
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 23 Oct 2026 05:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-120
CWE-287

Fri, 23 Oct 2026 00:45:00 +0000

Type Values Removed Values Added
Description No description provided
Title Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 Command Line Interface
References
Metrics cvssV3_1

{'score': 7, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: hpe

Published:

Updated: 2026-10-23T19:14:13.819Z

Reserved: 2026-09-22T14:51:39.866Z

Link: CVE-2026-95713

cve-icon Vulnrichment

Updated: 2026-10-23T15:57:17.793Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-22T19:18:07.313

Modified: 2026-10-26T14:18:54.933

Link: CVE-2026-95713

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-26T19:10:26Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer