This vulnerability affects the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways. An attacker authenticated with low privileges can exploit this flaw to retrieve sensitive information. The vulnerability is classified under CWE-200 (Exposure of Sensitive Information). The CVSS v3.1 base score is 6.5, reflecting a network attack vector, low attack complexity, and no user interaction required. The impact is confidentiality only, with no integrity or availability impact. No known exploits are reported in the wild. No patch or vendor advisory details are provided in the input data.

An attacker with low-privilege authentication can access sensitive information through the web management interface. This exposure could potentially be leveraged to gain further access to network services supported by the affected gateways. There is no reported impact on system integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. In the absence of an official fix, restrict access to the management interface to trusted users and networks, and monitor for suspicious activity. Follow vendor updates closely for any released patches or official mitigations.