← CVE Intelligence

CVE-2024-22246

N/A / VMware SD-WAN Edge PUBLISHED

Description (CNA)

VMware SD-WAN Edge contains an unauthenticated command injection vulnerability potentially leading to remote code execution. A malicious actor with local access to the Edge Router UI during activation may be able to perform a command injection attack that could lead to full control of the router.

Affected (CNA)

Vendor / productVersions
N/A / VMware SD-WAN Edgeaffected VMware SD-WAN Edge 4.5.x, VMware SD-WAN Edge 5.x

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.