This vulnerability involves stack-based buffer overflows in multiple management service components of HPE Aruba Networking Wireless Operating System (AOS) versions 8.10.0.0 to 8.13.0.0 and 10.4.0.0 to 10.8.0.0. Exploitation requires authenticated administrative access and involves sending specially crafted requests to affected services via the command-line interface. Successful exploitation could allow arbitrary code execution with elevated privileges on the underlying operating system. The CVSS 3.1 base score is 7.2, indicating high severity with network attack vector, low attack complexity, high privileges required, no user interaction, and impacts to confidentiality, integrity, and availability. No vendor advisory or patch information is currently provided, and no known exploits in the wild have been reported.

An attacker with administrative privileges who exploits this vulnerability could execute arbitrary code with elevated privileges on the underlying operating system of affected HPE Aruba Networking Wireless OS devices. This could lead to full compromise of the device, affecting confidentiality, integrity, and availability of the system. No known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit administrative access to trusted personnel only and monitor for unusual activity. Do not rely on generic mitigations as this vulnerability requires authenticated administrative access and involves buffer overflow exploitation.