This vulnerability exists in the ALE web interface of Hewlett Packard Enterprise products. Remote users with authentication can exploit this flaw to run arbitrary commands as root on the host operating system. This results in full system compromise. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. The affected versions are all releases from 0.0.0.0 through 5.0.0.0 inclusive. There is no data on patch availability or vendor remediation status.

Successful exploitation allows an authenticated remote attacker to execute arbitrary commands with root privileges on the host system, leading to complete compromise of the affected system. This includes full control over the operating system, potentially impacting confidentiality, integrity, and availability of the system and its data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the ALE web interface to trusted users only and monitor for suspicious activity. Do not assume the vulnerability is mitigated without vendor confirmation.