This vulnerability involves stack-based buffer overflows in multiple management service components of HPE Aruba Networking Wireless Operating System (AOS) versions 8.10.0.0 to 8.13.0.0 and 10.4.0.0 to 10.8.0.0. Exploitation requires authenticated administrative access and involves sending specially crafted requests to affected services via the command-line interface. Successful exploitation could allow arbitrary code execution with elevated privileges on the underlying operating system. The CVSS v3.1 base score is 7.2, indicating high severity. The vulnerability is tracked as CWE-121 (stack-based buffer overflow). No patch or official remediation level has been published by HPE as of the data provided.

An attacker with administrative privileges on the affected HPE Aruba AOS devices could exploit this vulnerability to execute arbitrary code with elevated privileges on the underlying operating system. This could lead to full compromise of the device, affecting confidentiality, integrity, and availability. No known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict administrative access to trusted personnel only and monitor for unusual activity. Avoid exposing management interfaces to untrusted networks. Follow HPE's official communications for updates on patches or mitigations.