CVE-2024-22247
VMware SD-WAN Edge contains a missing authentication and protection mechanism vulnerability. A malicious actor with physical access to the…
- Published
- Updated
- Reserved
- Assigned by
- vmware
Description
VMware SD-WAN Edge contains a missing authentication and protection mechanism vulnerability. A malicious actor with physical access to the SD-WAN Edge appliance during activation can potentially exploit this vulnerability to access the BIOS configuration. In addition, the malicious actor may be able to exploit the default boot priority configured.
Timeline
ID reserved
By vmware
- 3 months later
· 3 months later
Published
- 4 months later
· 4 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| vmwareCNA (assigner) | 3.1 | Medium4.8 | CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H |
| NVDNVD · Deferred | 3.1 | Medium4.8 | CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H |
- EPSS (exploitation in 30 days)
- 0.21% · top 88% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.8.
Weakness
- Missing Authentication and Protection Mechanism vulnerability in SD-WAN Edge
- CWE-287 Improper Authentication (opens in a new tab)All about CWE-287 and its CVEs
Affected products
- affected VMware SD-WAN Edge 4.5.x, VMware SD-WAN Edge 5.x
References (1)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2024-22247)Record last updated .