This vulnerability affects Oracle Hyperion Infrastructure Technology 11.2.25.0.000, specifically in the Installation and Configuration component. An unauthenticated attacker with physical network segment access can exploit this flaw to compromise the product, potentially leading to full takeover. The CVSS 3.1 base score is 7.5, indicating high severity with high impact on confidentiality, integrity, and availability. The attack vector requires access to the physical communication segment, and the attack complexity is high. Oracle's August 2026 Critical Security Patch Update advisory references this vulnerability among many others but does not provide explicit patch details for this version in the input data.

Successful exploitation can lead to complete compromise of Oracle Hyperion Infrastructure Technology, affecting confidentiality, integrity, and availability of the system. The attacker does not require authentication but must have access to the physical communication segment attached to the hardware. The vulnerability is rated high severity with a CVSS score of 7.5.

Oracle has included this vulnerability in its August 2026 Critical Security Patch Update advisory. Customers are strongly recommended to remain on actively supported versions and apply Oracle security patches promptly. Patch status for this specific version is not explicitly confirmed in the advisory content provided; therefore, users should consult the Oracle advisory directly for the latest patch availability and installation instructions.