Skip to content

CVE-2018-6961 VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled by default and should not be enabled on....

HighCVSS 8.1 EPSS 85.5% CISA KEV added 2022-03-25 · due 2022-04-15 Exploited in the wild Public exploit
Published
Updated
Exploit status
Exploited in the wild (confirmed)
Sign in for asset impact Search another CVE

Description

VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled by default and should not be enabled on untrusted networks. VeloCloud by VMware will be removing this service from the product in future releases. Successful exploitation of this issue could result in remote code execution.

CISA Known Exploited Vulnerability

Date added
2022-03-25
Due date (FCEB)
2022-04-15
Ransomware use
Unknown

Required action

Apply updates per vendor instructions.

Affected products

ProductAffected versionsFixed in
VMware nsx sd-wan by velocloud < 3.1.0 3.1.0
VMware nsx sd-wan by velocloud = prior to version 3.1.0 No fix listed

References

  • 104185 broken-link third-party-advisory vdb-entry
  • 1041210 broken-link third-party-advisory vdb-entry
  • www.vmware.com vendor-advisory
  • 44959 exploit third-party-advisory vdb-entry
  • www.cisa.gov government-resource us-government-resource