This vulnerability involves buffer overflow flaws in the affected interface of HPE Instant ON Networking APS devices. An unauthenticated attacker with adjacent network access can exploit these flaws to achieve remote code execution on the device's operating system. The vulnerability affects all versions from 0.0.0.0 through 3.4.1.0. The CVSS 3.1 vector indicates low attack complexity, no privileges required, no user interaction, and scope change, with high impact on confidentiality, integrity, and availability.

Successful exploitation allows an unauthenticated adjacent attacker to execute arbitrary commands on the underlying operating system, potentially leading to full compromise of the affected device. This can result in complete loss of confidentiality, integrity, and availability of the device and its network functions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor HPE advisories for updates. Until a fix is available, restrict adjacent network access to the affected interfaces where possible to reduce exposure.