This vulnerability exists in the proxy packet processing logic of HPE EdgeConnect SD-WAN Gateways. The component improperly handles malformed or truncated input, which can trigger an integer overflow. Exploitation by an unauthenticated remote attacker using specially crafted input could lead to a buffer overflow, enabling remote code execution or denial-of-service attacks. The CVSS 3.1 base score is 8.1, indicating high severity with network attack vector, high attack complexity, no privileges or user interaction required, and impacts on confidentiality, integrity, and availability.

Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code remotely or cause denial-of-service on the affected device. This compromises the confidentiality, integrity, and availability of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a patch is available, restrict network access to the affected components and monitor for unusual activity related to malformed input targeting the proxy packet processing logic.