This vulnerability involves buffer overflow flaws in the underlying operating system of HPE EdgeConnect SD-WAN Gateways. An unauthenticated remote attacker can exploit these flaws to execute arbitrary commands, resulting in complete system compromise. The CVSS 3.1 base score is 9.8, indicating critical severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The affected versions include 9.4.0.0 through 9.4.8.2, 9.5.0.0 through 9.5.8.1, 9.6.0.0 through 9.6.3.1, and exactly 9.7.0.0.

Successful exploitation allows an unauthenticated remote attacker to execute arbitrary code and commands on the underlying operating system of the affected EdgeConnect SD-WAN Gateways. This leads to complete system compromise, including full confidentiality, integrity, and availability impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a patch is available, restrict network access to the affected devices and monitor for suspicious activity.