Advisories · Technology
Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways.
Every CVE that names Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Unauthenticated Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Information disclosure
- CVSS 5.3 Medium
Unauthenticated Information Disclosure in EdgeConnect SD-WAN Orchestrator API allows exposure of sensitive data
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Information disclosure
- CVSS 5.5 Medium
Authenticated Buffer Overflow Vulnerability in an API Endpoint Leads to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Memory corruption
- CVSS 5.5 Medium
Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Cross-site scripting (XSS)
- CVSS 5.5 Medium
Authenticated Buffer Overflow Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways Web-Based Management Interface Causes Denial-of-Service
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Memory corruption
- CVSS 5.8 Medium
Authenticated Local Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Denial of service
- CVSS 5.9 Medium
Unauthenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Authentication bypass
- CVSS 5.9 Medium
Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Denial of service
- CVSS 6.4 Medium
Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Memory corruption
- CVSS 6.5 Medium
Authenticated Command Injection Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Command injection
- CVSS 6.5 Medium
Authenticated Information Disclosure in HPE Networking EdgeConnect Enterprise Web-Based Management Interface
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Information disclosure
- CVSS 6.5 Medium
Unauthenticated Denial-of-Service (DoS) Vulnerability leads to Service Disruption in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Denial of service
- CVSS 6.5 Medium
Unauthenticated Buffer Overflow Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Memory corruption
- CVSS 6.6 Medium
Authenticated Privilege Escalation Vulnerability in the Command Line Interface of HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Privilege escalation
- CVSS 7.0 High
Unauthenticated Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Denial of service
- CVSS 7.1 High
Unauthenticated Adjacent Information Disclosure and Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Information disclosure
- CVSS 7.2 High
Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateway API Endpoint
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Memory corruption
- CVSS 7.2 High
Authenticated Remote Code Execution Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Command injection
- CVSS 7.2 High
Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution or Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Memory corruption
- CVSS 7.5 High
Authentication Bypass Vulnerabilities in the Web-Based Management Interface of EdgeConnect SD-WAN Orchestrator
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Authentication bypass
- CVSS 7.5 High
Authenticated Arbitrary File Write Leading to Remote Code Execution in EdgeConnect SD-WAN Orchestrator
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Privilege escalation
- CVSS 7.5 High
Unauthenticated Denial-of-Service (DoS) Vulnerability leads to Service Disruption in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Denial of service
- CVSS 8.1 High
Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution or Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Memory corruption
- CVSS 8.1 High
Authentication Bypass Vulnerabilities in HPE Networking EdgeConnect SD-WAN Orchestrator API
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Authentication bypass
- CVSS 8.1 High
Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Memory corruption
- CVSS 8.2 High
Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Memory corruption
- CVSS 8.5 High
Authenticated Information Disclosure Vulnerability in HPE Networking EdgeConnect SD-WAN Orchestrator API
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Broken access control
- CVSS 8.5 High
Authenticated Server-Side Request Forgery Vulnerabilities Leading to Information Disclosure in EdgeConnect SD-WAN Orchestrator
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Server-side request forgery (SSRF)
- CVSS 8.6 High
Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Denial of service
- CVSS 8.8 High
Authenticated Command Injection Vulnerability leads to Remote Code Execution in EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Privilege escalation
- CVSS 8.8 High
Authorization Bypass Leading to Privilege Escalation in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Privilege escalation
- CVSS 8.8 High
Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
Authenticated Command Injection Vulnerability Leads to Privilege Escalation in EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Command injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Authentication Bypass Vulnerabilities in API of EdgeConnect SD-WAN Orchestrator
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Authentication bypass
- CVSS 9.9 CriticalCritical · CVSS 9+
Authenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Orchestrator
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Information disclosure
- CVSS 9.9 CriticalCritical · CVSS 9+
Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Privilege escalation
- CVSS 9.9 CriticalCritical · CVSS 9+
Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Privilege escalation