This vulnerability involves a buffer overflow in the web-based management interface of HPE EdgeConnect SD-WAN Gateways. An authenticated attacker with administrative privileges could exploit this flaw to cause a denial of service, leading to disruption of system operations and potentially an unstable system state. The CVSS 3.1 base score is 5.5, reflecting network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and high availability impact.

Successful exploitation results in denial of service, disrupting system operations and potentially causing instability. There is no confidentiality impact, but integrity impact is limited and availability impact is high. The attacker must have administrative access, limiting the attack surface.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, administrators should monitor HPE advisories for updates and consider restricting administrative access to trusted personnel only.