This vulnerability involves buffer overflow flaws in the underlying operating system of HPE EdgeConnect SD-WAN Gateways. An unauthenticated attacker with adjacent network access could exploit these flaws to execute arbitrary code with privileged system rights, potentially leading to full system compromise. The vulnerability affects multiple specific versions of the EdgeConnect SD-WAN Gateway software. The CVSS 3.1 base score is 8.8, indicating high severity with attack vector requiring adjacent network access, low attack complexity, no privileges or user interaction required, and impacts confidentiality, integrity, and availability at a high level. No patch or remediation details are provided in the input data.

Successful exploitation allows an unauthenticated adjacent attacker to execute arbitrary code as a privileged user on the underlying operating system, resulting in complete system compromise. This impacts confidentiality, integrity, and availability of the affected systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, restrict adjacent network access to the affected devices and monitor for unusual activity. Follow vendor guidance once published.