Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2g4w-cqhh-m9w9

Опубликовано: 02 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.8

Описание

VMware SD-WAN Edge contains a missing authentication and protection mechanism vulnerability.

A malicious actor with physical access to the SD-WAN Edge appliance during activation can potentially exploit this vulnerability to access the BIOS configuration. In addition, the malicious actor may be able to exploit the default boot priority configured.

VMware SD-WAN Edge contains a missing authentication and protection mechanism vulnerability.

A malicious actor with physical access to the SD-WAN Edge appliance during activation can potentially exploit this vulnerability to access the BIOS configuration. In addition, the malicious actor may be able to exploit the default boot priority configured.

EPSS

Процентиль: 21%
0.00066
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 4.8
nvd
больше 1 года назад

VMware SD-WAN Edge contains a missing authentication and protection mechanism vulnerability. A malicious actor with physical access to the SD-WAN Edge appliance during activation can potentially exploit this vulnerability to access the BIOS configuration. In addition, the malicious actor may be able to exploit the default boot priority configured.

CVSS3: 4.8
fstec
больше 1 года назад

Уязвимость микропрограммного обеспечения устройств централизованного управления сетью VMware SD-WAN Edge, связанная с недостатками процедуры аутентификации, позволяющая нарушителю получить доступа к конфигурации BIOS

EPSS

Процентиль: 21%
0.00066
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-287