MS needs to update OpenSSL within On Premise Data Gateway

Hi david147brown,
It looks like you have a very serious problem, and it is recommended that users regularly check for security bulletins issued by the Microsoft Security Response Center (MSRC).
I would recommend checking regularly for security bulletins issued by the Microsoft Security Response Center (MSRC).The MSRC typically releases regular security updates related to various products including Power BI, On-Premises Data Gateway, and Visual Studio, etc., and if a new OpenSSL security vulnerability is disclosed, the If a new OpenSSL security vulnerability is disclosed, the MSRC will issue a patch or mitigation.

Microsoft Security Response Center

In order to enhance the security of On-Premises Data Gateway, it is recommended that you take more detailed cybersecurity measures to minimize the risk of potential attacks, here are the relevant documents that I found for you, I hope it will help you!
View and manage on-premises data gateways - Power Platform | Microsoft Learn

Azure network security groups overview | Microsoft Learn

If none of the above measures are of practical help to you, and your feedback is particularly urgent, we recommend that you contact Microsoft's Technical Support team directly and submit a work order to expedite the process.
This approach ensures that the issue is formally documented and may prompt a quicker response from the product team.

Hope it helps!

Best regards,
Community Support Team_ Tom Shen

If this post helps then please consider Accept it as the solution to help the other members find it more quickly.

We’re seeing the same issue flagged by Microsoft Defender, which shows an attack path due to a vulnerability. The root cause is the outdated OpenSSL version in the Simba Spark ODBC connector, last updated 6 months ago.

Since the on-premises data gateway uses this connector, it also inherits the vulnerability. We’re waiting for an update to fix this issue, and we believe Microsoft should address this risk promptly.