Skip to content
Sign in
4.8 Medium

CVE-2024-22247 VMware SD-WAN Edge contains a missing authentication and protection mechanism vulnerability

Description

VMware SD-WAN Edge contains a missing authentication and protection mechanism vulnerability. A malicious actor with physical access to the SD-WAN Edge appliance during activation can potentially exploit this vulnerability to access the BIOS configuration. In addition, the malicious actor may be able to exploit the default boot priority configured.

Affected products and versions

Product Affected versions Fixed in
VMware SD-WAN Edge Versions not published
sd-wan_edge 5.x No fix stated

Other CVEs of VMware SD-WAN Edge

The 2 CVEs of VMware SD-WAN Edge →
CVE-2024-22246 VMware SD-WAN Edge contains an unauthenticated command injection vulnerability potentially leading to remote code… 7.4 High
Track this CVE