This vulnerability involves buffer overflow issues in the command line interface of HPE AOS-CX software. A remote attacker who already has high privileges could exploit this flaw to execute arbitrary code as a privileged user on the underlying OS. The CVSS 3.1 base score is 7.2, indicating a high severity with network attack vector, low attack complexity, and no user interaction required. The vulnerability is identified as CWE-120 (Classic Buffer Overflow). The affected versions explicitly include 10.13.0000, 10.16.0000, 10.17.0000, and 10.18.0000. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

Successful exploitation allows remote execution of arbitrary code with elevated privileges on the underlying operating system, potentially leading to full system compromise. The attacker must have high privileges already, but no user interaction is needed. Confidentiality, integrity, and availability impacts are all rated high according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the command line interface to trusted administrators only and monitor for suspicious activity. Avoid exposing the management interface to untrusted networks.