Multiple critical authentication bypass vulnerabilities in the HPE EdgeConnect SD-WAN Orchestrator API allow unauthenticated attackers to access and modify sensitive system configurations.

The REST API interface lacks proper authentication enforcement for critical functions. This allows an unauthenticated remote attacker to interact with the API, potentially leading to unauthorized data access and system modification.

As a core component of SD-WAN infrastructure, the compromise of the Orchestrator could lead to a total loss of network visibility and control. Given the 9.8 CVSS score, the potential for an attacker to reconfigure network traffic or access sensitive management data represents a significant threat to organizational operations.

Immediate Action: Apply the latest security updates provided by HPE for the EdgeConnect SD-WAN Orchestrator. Consult the vendor advisory for specific guidance on addressing these API vulnerabilities.

Proactive Monitoring: Review API logs for unauthorized access attempts, especially from external IP addresses, and monitor for changes in system configurations.

Compensating Controls: Restrict access to the Orchestrator management interface to trusted internal networks or VPNs to limit the exposure of the vulnerable API.

Public Exploit Available: No

Immediate patching is required to secure the Orchestrator's API interface. Administrators should treat this as a high-priority task, ensuring that all vulnerable versions are updated to the current secure baseline to prevent unauthorized remote management of the SD-WAN infrastructure.