EdgeConnect SD-WAN Gateways vulnerability

What happened

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by HPE Networking EdgeConnect SD-WAN Gateways.

Affected versions

EdgeConnect SD-WAN Gateways: 9.7.0.0 through 9.7.0.0 (semver); 9.6.0.0 through 9.6.3.1 (semver); 9.5.0.0 through 9.5.8.1 (semver); 9.4.0.0 through 9.4.8.2 (semver) Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.