This vulnerability in HPE EdgeConnect SD-WAN Gateways enables an unauthenticated attacker with adjacent network access to extract limited memory information and disrupt normal service operation. Exploitation can lead to denial of service via system crash or disclosure of uninitialized stack memory, classified under CWE-200 (Information Exposure). The CVSS 3.1 score is 7.1, indicating high severity with attack vector as adjacent network, low attack complexity, no privileges or user interaction required, and impacts confidentiality and availability.

Successful exploitation can cause denial of service by crashing the system and disclose uninitialized stack memory, potentially leaking sensitive information. The attacker does not require authentication or user interaction, increasing the risk in adjacent network environments. Integrity is not impacted according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, restrict adjacent network access to the affected devices where possible to reduce exposure.