Description
VMware SD-WAN Edge contains an unauthenticated command injection vulnerability potentially leading to remote code execution.
A malicious actor with local access to the Edge Router UI during
activation may be able to perform a command injection attack that could
lead to full control of the router.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | VMware SD-WAN Edge | VMware SD-WAN Edge 4.5.x, VMware SD-WAN Edge 5.x | — |
Advisories 1
- WID-SEC-2024-0764 VMware SD-WAN: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 27, 2024