VmwareVULNRICHMENT:CVE-2024-22246CVE-2024-22246
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
Low
SSVC
Exploitation
None
Automatable
No
Technical Impact
Total
VMware SD-WAN Edge contains an unauthenticated command injection vulnerability potentially leading to remote code execution.
A malicious actor with local access to the Edge Router UI during
activation may be able to perform a command injection attack that could
lead to full control of the router.
ADP Affected
[
{
"cpes": [
"cpe:2.3:a:vmware:sd-wan_edge:4.5.x:*:*:*:*:*:*:*"
],
"vendor": "vmware",
"product": "sd-wan_edge",
"versions": [
{
"status": "affected",
"version": "4.5.x"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:vmware:sd-wan_edge:5.x:*:*:*:*:*:*:*"
],
"vendor": "vmware",
"product": "sd-wan_edge",
"versions": [
{
"status": "affected",
"version": "5.x"
}
],
"defaultStatus": "unknown"
}
]Related
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
Low
SSVC
Exploitation
None
Automatable
No
Technical Impact
Total