WID-SEC-W-2024-0764

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

VMware SD-WAN: Mehrere Schwachstellen

view advisory published 2024-04-02

Ein Angreifer kann mehrere Schwachstellen in VMware SD-WAN ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2024-22248US——
VMware SD-WAN Orchestrator contains an open redirect vulnerability. A malicious actor may be able to redirect a victim to an attacker controlled domain due to improper path handl…
CVE-2024-22247US——
VMware SD-WAN Edge contains a missing authentication and protection mechanism vulnerability. A malicious actor with physical access to the SD-WAN Edge appliance during activation…
CVE-2024-22246US——
VMware SD-WAN Edge contains an unauthenticated command injection vulnerability potentially leading to remote code execution. A malicious actor with local access to the Edge Router…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan