A flaw in HPE EdgeConnect SD unauthenticated remote attacker to trigger a denial‑of‑service on certain gateway services. The vulnerability, classified as CWE‑400, can cause the targeted services to become unresponsive, potentially disrupting network connectivity for user devices and business applications. It is inferred that an unauthenticated attacker can exploit this flaw because the description explicitly states "unauthenticated remote attacker" can cause the DoS.

Hewlett Packard Enterprise EdgeConnect SD‑WAN Gateways. No specific software or firmware versions were disclosed as affected; it applies to all versions currently deployed.

The CVSS score of 7 marks the flaw as high severity, indicating a significant impact on availability if exploited. The EPSS score of <1% indicates a very low predicted exploitation probability, but the lack of authentication means any node on the management network could potentially trigger the denial of service. The vulnerability is not listed in the KEV catalog, and there are no known active exploits reported. Facilities with unrestricted access to the gateways’ management interface or exposed services are at highest risk; firewalling or segmentation mitigates the attack surface. It is inferred that the lack of authentication requirement is a critical factor for exploitation because the description explicitly allows unauthenticated remote access.