CVE-2018-6961: VMware NSX SD-WAN Edge - Command Injection
VMware · NSX SD-WAN by VeloCloud
Affected: VMware NSX SD-WAN by VeloCloud · Exploitation: in CISA KEV since 25 Mar 2022
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
ExploitationIn CISA KEV
- In CISA KEVCISA KEV catalogue25 Mar 2022
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not established: not seen
Higher than 99% of scored CVEs
DescriptionCVE.org
VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled by default and should not be enabled on untrusted networks. VeloCloud by VMware will be removing this service from the product in future releases. Successful exploitation of this issue could result in remote code execution.
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- VMware · NSX SD-WAN by VeloCloudprior to version 3.1.0
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalogue.
- CISA KEV
- Listed since 25 Mar 2022 · catalogue entry
- Public check
- VMware NSX SD-WAN Edge - Command Injection · nuclei template in projectdiscovery/nuclei-templates
- Vendor
- VMware
- Published
- June 2018
What changed
- CISA added it to the KEV catalogue CISA
CoverageNo articles yet
No CyberSIXT article names CVE-2018-6961 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.