Medium severity · published Apr 2, 2024
CVE-2024-22247
VMware SD-WAN Edge contains a missing authentication and protection mechanism vulnerability
4.8
CVSS
0.2%
EPSS
No
On KEV
Description
VMware SD-WAN Edge contains a missing authentication and protection mechanism vulnerability.
A malicious actor with physical access to the SD-WAN Edge appliance
during activation can potentially exploit this vulnerability to access
the BIOS configuration. In addition, the malicious actor may be able to
exploit the default boot priority configured.
CVSS vector
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Attack vector
Physical
Complexity
High
Privileges
None
User interaction
None
Confidentiality
None
Integrity
Low
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 12% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VS
VMware SD-WAN Edge ·
VMware SD-WAN Edge 4.5.x, VMware SD-WAN Edge 5.x · source: vendor
SE
Sd-wan Edge · Vmware
4.5.x; 5.x · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-22247
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-22247
www.vmware.com
https://www.vmware.com/security/advisories/VMSA-2024-0008.html
More from VMware SD-WAN Edge
7.5
CVE-2023-20899
VMware SD-WAN (Edge) contains a bypass authentication vulnerability
7.4
CVE-2024-22246
VMware SD-WAN Edge contains an unauthenticated command injection vulnerability potentially leading to remote code execution