A command injection vulnerability has been identified in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways. This flaw allows an authenticated remote attacker with limited privileges to execute arbitrary commands with elevated privileges or cause a denial-of-service on the device. The vulnerability has a medium severity rating with a CVSS score of 6.5. No specific affected versions or patch information are provided in the available data.