This vulnerability involves stack-based buffer overflows in multiple management service components of HPE Aruba Networking Wireless Operating System (AOS) versions 8.10.0.0 to 8.13.0.0 and 10.4.0.0 to 10.8.0.0. The affected components are accessed through the command-line interface. Exploitation requires an attacker to have authenticated administrative access. Successful exploitation could allow arbitrary code execution with elevated privileges on the device's operating system. The CVSS 3.1 base score is 7.2, indicating high severity with network attack vector, low attack complexity, high privileges required, no user interaction, and impacts to confidentiality, integrity, and availability. No patch or official remediation details are currently available from the vendor advisory or other sources.

An authenticated attacker with administrative privileges could exploit this vulnerability to execute arbitrary code with elevated privileges on the underlying operating system. This could lead to full compromise of the affected device, impacting confidentiality, integrity, and availability of the system and potentially the network it manages. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit administrative access to trusted personnel only and monitor for unusual activity. No vendor advisory or patch information is currently available to confirm remediation or temporary fixes.