EUVD-2026-79218
GHSA-7cw5-xx58-3g4w
Severity by source
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Primary rating from Vendor (hpe) · only source for this CVE.
CVSS VectorVendor: hpe
Lifecycle Timeline
2DescriptionCVE.org
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to obtain limited information from memory and disrupt the normal operation of the affected service. Successful exploitation could result in a denial of service (system crash) or the disclosure of uninitialized stack memory.
AnalysisAI
Adjacent-network attackers can crash HPE Networking EdgeConnect SD-WAN Gateways or leak small amounts of uninitialized stack memory by sending crafted traffic to the gateway, affecting unauthenticated devices reachable from the same Layer 2 segment. The flaw (CWE-200) carries a 7.1 CVSS score with the availability impact rated High and confidentiality impact Low, and it spans four maintained release trains from 9.4.0.0 through 9.7.0.0. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-200 – Information Exposure
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today