VMware SD-WAN Vulnerabilities Let Attackers Execute Arbitrary Commands

A whole lot of security flaws affecting VMware SD-WAN had been addressed, allowing arbitrary commands to be done on the intended machine.

If these vulnerabilities are successfully exploited, enterprises that explain VMware SD-WAN to arrange their network connections would be exposed to serious threats.

The vulnerabilities tracked as CVE-2024-22246, CVE-2024-22247, and CVE-2024-22248 impact VMware SD-WAN Edge and SD-WAN Orchestrator.

Unauthenticated Account for Injection vulnerability – (CVE-2024-22246)

An unauthenticated uncover injection vulnerability in VMware SD-WAN Edge has the skill to trigger distant code execution.

VMware sure that the venture has a most CVSSv3 irascible rating of 7.4 and falls into the necessary severity level.

“A malicious actor with native get entry to to the Edge Router UI one day of activation would be ready to develop a uncover injection assault that can also end result in plump have an eye fixed on of the router,” reads the security advisory released by VMware.

This security vulnerability was reported by Saif Aziz (@wr3nchsr) from CyShield.

Missing Authentication and Security Mechanism vulnerability- (CVE-2024-22247)

There’s a vulnerability within the authentication and security route of of VMware SD-WAN Edge.

VMware sure that this venture has a most CVSSv3 irascible rating of 4.8, inserting it within the Moderate severity vary.

All over activation, a malicious actor who has physical get entry to to the SD-WAN Edge equipment would be ready to exploit this vulnerability and get entry to the BIOS configuration.

Moreover, the malicious actor can also impartial be ready to rob excellent thing about the specified default boot precedence.

This security vulnerability was reported by Saif Aziz (@wr3nchsr) from CyShield.

Start redirect vulnerability – (CVE-2024-22248)

An initiate redirect vulnerability exists in VMware SD-WAN Orchestrator. With a most CVSSv3 irascible rating of 7.1, VMware sure that this venture falls into the necessary severity level.

“A malicious actor would be ready to redirect a sufferer to an attacker-controlled domain attributable to hideous route facing main to clean data disclosure,” the firm talked about.

Fixes Released

Hence, VMware strongly advises utilizing the available fixes impartial away if your firm makes explain of VMware SD-WAN.

Is Your Network Under Attack? - Read CISO’s Guide to Avoiding the Next Breach - Download Free Guide