Back to Database
Status published
High
CVE-2024-22246
VMware SD-WAN Edge contains an unauthenticated command injection vulnerability potentially...
Vulnerability Description
VMware SD-WAN Edge contains an unauthenticated command injection vulnerability potentially leading to remote code execution. A malicious actor with local access to the Edge Router UI during activation may be able to perform a command injection attack that could lead to full control of the router.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-22246
Credits & Attribution
No credits recorded in the NVD database.
More from N/A
View All →CVE-2025-8083
Vuetify Prototype Pollution via Preset options
High
8.6
CVE-2025-8082
Vuetify XSS via unsanitized 'titleDateFormat' in 'VDatePicker'
Medium
6.3
CVE-2025-22217
Avi Load Balancer contains an unauthenticated blind SQL Injection vulnerability...
High
8.6
CVE-2025-1461
Vuetify XSS through 'eventMoreText' prop of VCalendar
Medium
5.6
CVE-2025-14505
Elliptic Cryptanalysis vulnerability when `k` has leading zeros
Medium
5.6
Affected Vendor
Affected Software
VMware SD-WAN Edge
Vulnerable Versions:
VMware SD-WAN Edge 4.5.x, VMware SD-WAN Edge 5.x
Timeline
Official Publish:
April 2nd, 2024
Last Modified:
December 16th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.