CVE-2024-22247

State: Published
Severity: 4.8 Medium
Published: Apr 2, 2024
Updated: Aug 1, 2024
Reserved: Jan 8, 2024

Description

VMware SD-WAN Edge contains a missing authentication and protection mechanism vulnerability.

A malicious actor with physical access to the SD-WAN Edge appliance during activation can potentially exploit this vulnerability to access the BIOS configuration. In addition, the malicious actor may be able to exploit the default boot priority configured.

Scores

CVSS	Score	Vector	Source
3.1	4.8 Medium	CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H	vmware

Weaknesses

CWE-287 Improper Authentication

Affected Products

Product	Versions
VMware SD-WAN EdgeN/A	VMware SD-WAN Edge 4.5.x, VMware SD-WAN Edge 5.xAffected

References

https://www.vmware.com/security/advisories/VMSA-2024-0008.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.