EUVD-2026-79229
GHSA-mp3q-57vh-39hc
Severity by source
AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
Trigger is a low-complexity network request to the management GUI, but full admin credentials are mandatory, so PR:H and availability-only impact.
Primary rating from Vendor (hpe).
CVSS VectorVendor: hpe
Lifecycle Timeline
1DescriptionCVE.org
A buffer overflow vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways that could allow an authenticated attacker with administrative access to cause a denial of service. Successful exploitation could allow an attacker to disrupt system operations, potentially resulting in an unstable system state.
AnalysisAI
A buffer overflow in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways allows an authenticated administrator to crash or destabilize the appliance, producing a denial-of-service condition. All maintenance branches 9.4.0.0 through 9.4.8.2, 9.5.0.0 through 9.5.8.1, 9.6.0.0 through 9.6.3.1, and 9.7.0.0 are affected per ENISA EUVD tracking. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires authenticated administrative access to the web-based management interface of the EdgeConnect SD-WAN Gateway - the CVSS PR:H metric and the vendor's own 'authenticated attacker with administrative access' wording confirm this is not reachable by unauthenticated users. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Real-world risk is bounded by the privilege requirement: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H shows a network-reachable, low-complexity trigger but only for an attacker already holding administrative credentials on the management interface, with no confidentiality impact, limited integrity impact, and high availability impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | HPE has published a security advisory for this issue at https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US; no exact fixed firmware build was included in the provided data, so administrators must consult that advisory (or HPE support) for the specific patched release per branch, and the supplied EPS references only the vendor advisory. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today