This vulnerability involves command injection in the affected interface of HPE Networking Instant ON. An attacker who is authenticated and has high privileges can inject commands that the system executes with privileged user rights. This could lead to full compromise of the underlying operating system. The CVSS 3.1 base score is 7.2, reflecting network attack vector, low attack complexity, high privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. The affected versions are from 0.0.0.0 through 3.4.1.0 inclusive. No vendor advisory or patch information is provided in the input data.

Successful exploitation allows an authenticated attacker with high privileges to execute arbitrary commands on the underlying operating system, potentially leading to full system compromise including confidentiality, integrity, and availability impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or vendor advisory is provided, monitor for official updates from Hewlett Packard Enterprise and apply any released fixes promptly. Limit access to the affected interface to trusted administrators only to reduce risk.