CVE-2024-22247 — MEDIUM (4.8)

Vulnerability Description

VMware SD-WAN Edge contains a missing authentication and protection mechanism vulnerability. A malicious actor with physical access to the SD-WAN Edge appliance during activation can potentially exploit this vulnerability to access the BIOS configuration. In addition, the malicious actor may be able to exploit the default boot priority configured.

CVSS Score

4.8

MEDIUM

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

LOW

Availability

HIGH

Related Weaknesses (CWE)

CWE-287

References

FAQ

What is CVE-2024-22247?

CVE-2024-22247 is a vulnerability with a CVSS score of 4.8 (MEDIUM). VMware SD-WAN Edge contains a missing authentication and protection mechanism vulnerability. A malicious actor with physical access to the SD-WAN Edge appliance during activation can potentially exp...

How severe is CVE-2024-22247?

CVE-2024-22247 has been rated MEDIUM with a CVSS base score of 4.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-22247?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.