Impact
The vulnerability describes an authenticated adjacent buffer overflow in the API of AOS-10 that allows an attacker with high privileges to execute arbitrary code on the underlying operating system. Successful exploitation results in remote code execution with privileged user rights. The impact is clear: an authenticated attacker can gain full control over the affected system.
Affected Systems
Hewlett Packard Enterprise systems, likely the AOS-10 product, are affected. Specific product versions are not disclosed in the advisory.
Risk and Exploitability
The CVSS score of 6.8 indicates a moderate to high risk. The EPSS score is 0.00184, indicating a very low but nonzero exploit probability, and the vulnerability is not listed in the CISA KEV catalog. The lack of a detailed attack vector suggests that exploitation requires authenticated access, but the ability to execute code remotely is confirmed. The potential for widespread impact depends on the extent of the authenticated access scope within the target environment.
OpenCVE Enrichment