This vulnerability is a buffer overflow (CWE-120) in the API endpoint of HPE EdgeConnect SD-WAN Gateways. An authenticated remote attacker with admin privileges can exploit this flaw to execute arbitrary commands on the device's operating system. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and high availability impact. The affected versions span from 9.4.0.0 up to and including 9.7.0.0. There is no information about available patches or vendor advisories specifying remediation.

Exploitation requires administrative authentication but can lead to arbitrary command execution on the underlying OS, which may disrupt service availability. There is no confidentiality impact, but integrity is slightly affected. The overall impact is medium severity due to the required privileges and potential for high availability disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, ensure that administrative access to the API endpoint is tightly controlled and monitored to prevent unauthorized exploitation.