CVE-2024-22247 Auth bypass in VMware SD-WAN Edge
An attacker with physical access can bypass authentication to access BIOS configuration and exploit default boot priorities on VMware SD-WAN Edge appliances.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-22247?
CVE-2024-22247 is a medium-severity authentication bypass vulnerability in VMware SD-WAN Edge, published on 2 Apr 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
VMware SD-WAN Edge contains a missing authentication and protection mechanism vulnerability.
A malicious actor with physical access to the SD-WAN Edge appliance during activation can potentially exploit this vulnerability to access the BIOS configuration. In addition, the malicious actor may be able to exploit the default boot priority configured.
Weakness: CWE-287
Which versions are affected by CVE-2024-22247?
How do I fix CVE-2024-22247?
No fix has been published for CVE-2024-22247 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2024-22247 being exploited?
There is no known exploitation of CVE-2024-22247 in the wild and no public exploit code.
Sources
Also known as GHSA-2g4w-cqhh-m9w9.