Executive brief
HPE EdgeConnect SD-WAN Gateways are network appliances that manage secure wide-area network connections for distributed enterprises. An authenticated attacker with high-level credentials can exploit a flaw in the command-line interface to gain additional privileges and run arbitrary code, potentially compromising the integrity and availability of the SD-WAN infrastructure.
Technical details
This privilege escalation vulnerability exists in the command-line interface of HPE Networking EdgeConnect SD-WAN Gateways. The vulnerability requires an authenticated remote attacker with elevated privileges to trigger the flaw, allowing them to escalate beyond their authorized access level and execute arbitrary code on the affected system. The attack vector is network-based and depends on prior authentication with high privileges. No patch availability information is provided in the advisory.
Affected products
- HPE EdgeConnect SD-WAN Gateways
Timeline
- 2026-09-15: disclosed