CVE-2023-20899: VMware SD-WAN Edge Firmware

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

VMware SD-WAN (Edge) contains a bypass authentication vulnerability. An unauthenticated attacker can download the Diagnostic bundle of the application under VMware SD-WAN Management.

Affected products

• VMware SD-WAN Edge Firmware: from 4.5.0, before 4.5.2 (fixed in 4.5.2)

Published 2023-07-06. Last modified 2026-06-17.