Use the official AA23-289A advisory. Verify product and version scope, the two setup endpoints, disclosure timeline, exfiltration utilities and configuration methods, observed request headers, and the response guidance for established persistence.