Filtered by vendor Vmware Subscriptions
Filtered by product Sd-wan Edge Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-22246 1 Vmware 1 Sd-wan Edge 2024-11-21 7.4 High
VMware SD-WAN Edge contains an unauthenticated command injection vulnerability potentially leading to remote code execution. A malicious actor with local access to the Edge Router UI during activation may be able to perform a command injection attack that could lead to full control of the router.
CVE-2023-20899 1 Vmware 2 Sd-wan Edge, Sd-wan Edge Firmware 2024-11-21 7.5 High
VMware SD-WAN (Edge) contains a bypass authentication vulnerability. An unauthenticated attacker can download the Diagnostic bundle of the application under VMware SD-WAN Management.