This vulnerability allows an unauthenticated attacker with adjacent network access to perform command injection via the CLI interface of HPE Instant ON APs. By sending specially crafted packets, the attacker can execute arbitrary commands as a privileged user on the underlying operating system, potentially leading to full system compromise. The affected versions are all versions up to 3.4.1.0 inclusive. No known exploits are reported in the wild at this time.

Successful exploitation can lead to complete system compromise, including full control over the affected device's operating system. This impacts confidentiality, integrity, and availability of the device and potentially the network it serves.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the CLI interface to trusted networks only and monitor for suspicious adjacent network activity targeting the device.