CVE-2024-22247

VMware SD-WAN Edge contains a missing authentication and protection mechanism vulnerability

Medium · published April 2, 2024

CVSS v3.1
4.8
EPSS
0%
Percentile
11.3
In the wild
Unconfirmed
What it is

VMware SD-WAN Edge contains a missing authentication and protection mechanism vulnerability.

A malicious actor with physical access to the SD-WAN Edge appliance

during activation can potentially exploit this vulnerability to access

the BIOS configuration. In addition, the malicious actor may be able to

exploit the default boot priority configured.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00215 · 11.3th percentile
Published
2024-04-02T15:49Z
EPSS history
Timeline
  • 02 APR 15:49Z
    VMware SD-WAN Edge contains a missing authentication and protection mechanism vulnerability
    cvelistv5