This vulnerability involves stack-based buffer overflows in multiple management service components of HPE Aruba Networking Wireless Operating System (AOS) versions 8.10.0.0 to 8.13.0.0 and 10.4.0.0 to 10.8.0.0. It requires an attacker to have authenticated administrative access to the device's command-line interface. Exploitation could allow arbitrary code execution with elevated privileges on the underlying operating system. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. No patch or official remediation has been disclosed by HPE as of the publication date.

Successful exploitation could lead to arbitrary code execution with elevated privileges on the underlying operating system of affected HPE Aruba AOS devices. This could compromise the confidentiality, integrity, and availability of the device and potentially the network it manages. The vulnerability requires administrative privileges, limiting the attack surface to authenticated administrators. There are no known exploits in the wild at this time.

As of the current information, no official patch or remediation has been published by Hewlett Packard Enterprise. Users should monitor HPE's official advisories for updates and apply patches promptly once available. Until a fix is released, restrict administrative access to trusted personnel only and consider additional access controls to limit exposure. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.