This vulnerability exists in the operating system of HPE EdgeConnect SD-WAN Gateways. An authenticated local attacker with low privileges could exploit this flaw to cause a denial-of-service condition, disrupting system operations and potentially causing instability. The CVSS 3.1 base score is 5.8, reflecting medium severity with attack vector local, attack complexity high, privileges required low, no user interaction, unchanged scope, low confidentiality and integrity impact, and high availability impact. Affected versions include 9.7.0.0, 9.6.0.0 through 9.6.3.1, 9.5.0.0 through 9.5.8.1, and 9.4.0.0 through 9.4.8.2.

Successful exploitation allows an authenticated local attacker to cause denial-of-service, disrupting system operations and potentially resulting in an unstable system state. Confidentiality and integrity impacts are low, but availability impact is high.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since this vulnerability requires authenticated local access and has high attack complexity, limiting local access to trusted users may reduce risk until a patch is available.