CVE-2024-22246
Published: Apr 2, 2024
Modified: Dec 16, 2025
CVSS v3.1
7.4
Description
VMware SD-WAN Edge contains an unauthenticated command injection vulnerability potentially leading to remote code execution. A malicious actor with local access to the Edge Router UI during activation may be able to perform a command injection attack that could lead to full control of the router.
| Vendor | Product | Versions |
|---|---|---|
N/A | VMware SD-WAN Edge | affected VMware SD-WAN Edge 4.5.x, VMware SD-WAN Edge 5.x |
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now