This vulnerability exists in the Network management service of HPE Aruba Networking Wireless Operating System (AOS) versions 8 and 10. It is a heap-based buffer overflow that can be triggered remotely without authentication, enabling remote code execution as a privileged user or causing denial-of-service. The CVSS 3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impact primarily on availability. No vendor advisory or patch information is currently available, and no known exploits have been reported in the wild.

Successful exploitation could lead to full system compromise by allowing arbitrary code execution with privileged access, or cause denial-of-service impacting the affected system process. There is no indication of confidentiality or integrity impact. The vulnerability affects multiple versions of HPE Aruba AOS, potentially impacting network infrastructure relying on these versions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should monitor vendor communications closely. No vendor advisory or official remediation is currently available, so no specific mitigation steps can be recommended beyond awaiting vendor guidance.