The vulnerability affects the protocol-handling component of HPE Aruba Networking Wireless Operating System (AOS) versions 10.4.0.0, 10.7.0.0, and 10.8.0.0. Due to insufficient input validation, an unauthenticated attacker can send crafted network messages that cause termination of a critical system process, leading to denial-of-service. The CVSS 3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability. No patch or official remediation guidance is currently available, and no known exploits have been reported.

Successful exploitation results in denial-of-service by terminating a critical system process. There is no impact on confidentiality or integrity. The vulnerability can be exploited remotely without authentication or user interaction. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, consider limiting network exposure of affected devices and monitoring for unusual service interruptions. Do not assume the vulnerability is mitigated without vendor confirmation.