CVE-2018-6961 — VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability

provenance: imported · CVE: CVE-2018-6961

CVE-2018-6961: VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	VMware
Product	SD-WAN Edge
Date added	2022-03-25
Due date	2022-04-15
Ransomware campaign use	Unknown

Description

VMware SD-WAN Edge by VeloCloud contains a command injection vulnerability in the local web UI component. Successful exploitation of this issue could result in remote code execution.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2018-6961

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-6961
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog