This vulnerability involves stack-based buffer overflows in multiple management service components of HPE Aruba Networking Wireless Operating System (AOS) versions 8.10.0.0 to 8.13.0.0 and 10.4.0.0 to 10.8.0.0. Exploitation requires authenticated administrative access to the CLI and involves sending specially crafted requests to affected services. Successful exploitation could lead to arbitrary code execution with elevated privileges on the device's underlying operating system. The CVSS 3.1 base score is 7.2, reflecting network attack vector, low attack complexity, high privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or official remediation level has been disclosed by HPE as of the published date.

An attacker with administrative privileges on the affected HPE Aruba AOS devices could exploit this vulnerability to execute arbitrary code with elevated privileges. This could compromise the confidentiality, integrity, and availability of the affected system. The vulnerability is rated high severity (CVSS 7.2). There are no known public exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, organizations should monitor HPE advisories for updates. Until a patch is available, restrict administrative access to trusted personnel only and consider additional access controls to limit exposure to this vulnerability.