This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.
[TLP:CLEAR] VMware SD-WAN Edge and SD-WAN Orchestrator fix 3 vulnerabilities
An unauthenticated attacker with local access to the Edge router user interface during activation can inject a malicious command, which may lead to full control of the router [1].
The vulnerability is present in product:
- VMware SD-WAN Edge; >=5.0.0, <5.0.1; >=4.5.0, <4.5.1
CVSS: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
More information:
- CVE-2024-22246 at cve.org, NVD
- CWE-78 at cwe.mitre.org
The vulnerability was publicly disclosed 2. 4. 2024.
An unauthenticated attacker with physical access to the SD-WAN Edge device during activation can exploit this vulnerability to access the BIOS configuration and can further abuse the configured default boot priority [1].
The vulnerability is present in product:
- VMware SD-WAN Edge; >=5.0.0, <5.0.1; >=4.5.0, <4.5.1
CVSS: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
More information:
- CVE-2024-22247 at cve.org, NVD
- CWE-862 at cwe.mitre.org
The vulnerability was publicly disclosed 2. 4. 2024.
An unauthenticated remote attacker can redirect a victim to an attacker-controlled domain due to improper path handling, which may lead to disclosure of sensitive information [1].
The vulnerability is present in product:
- VMware SD-WAN Orchestrator; >=5.0.0, <5.0.1
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
More information:
- CVE-2024-22248 at cve.org, NVD
- CWE-601 at cwe.mitre.org
The vulnerability was publicly disclosed 2. 4. 2024.
VMware SD-WAN Edge versions 5.0.1 and 4.5.1 and SD-WAN Orchestrator version 5.0.1 fix 3 vulnerabilities [1].
By CESNET, z.s.p.o. Michaela Jarošová on 5. 4. 2024.