This vulnerability in HPE EdgeConnect SD-WAN Gateways involves privilege escalation via the API, enabling a remote authenticated user with low privileges to gain administrative rights. Exploitation could result in complete system compromise. The affected versions are 9.4.0 through 9.7.0 (inclusive) with specific sub-versions detailed. No information about available patches or vendor advisories is provided in the input data.

Successful exploitation allows an attacker with low-level authenticated access to escalate privileges to administrative level, leading to full control over the system. This compromises confidentiality, integrity, and availability of the affected device and potentially the network it manages.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the API to trusted users only and monitor for suspicious activity involving privilege escalation attempts.