A flaw in HPE EdgeConnect SD‑WAN Gateways allows an unauthenticated remote attacker to trigger a denial‑of‑service on certain gateway services. The vulnerability, classified as CWE‑400, can cause the targeted services to become unresponsive, potentially disrupting network connectivity for user devices and business applications.

Hewlett Packard Enterprise EdgeConnect SD‑WAN Gateways. No specific software or firmware versions were disclosed as affected; it applies to all versions currently deployed.

The CVSS score of 7 marks the flaw as high severity, indicating a significant impact on availability if exploited. No EPSS data is available, so the likelihood of exploitation remains undetermined, but the lack of authentication requirements means any node on the management network could potentially trigger the denial of service. The vulnerability is not listed in the CISA KEV catalog, so no known active exploits have been reported. Facilities with unrestricted access to the gateways’ management interface or exposed services are at highest risk; firewalling or segmentation mitigates the attack surface.