High severity · published Jun 11, 2018
CVE-2018-6961
VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability
In wildKEV
8.1
CVSS
85.3%
EPSS
Yes
On KEV
Description
VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled by default and should not be enabled on untrusted networks. VeloCloud by VMware will be removing this service from the product in future releases. Successful exploitation of this issue could result in remote code execution.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)85.3% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Mar 25, 2022
Federal remediation dueApr 15, 2022
Ransomware campaign useNot known
Affected products
Which versions
NS
NSX SD-WAN by VeloCloud · VMware
prior to version 3.1.0 · source: vendor, NVD
SE
SD-WAN Edge · VMware
All versions, or not specified · source: KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-6961
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-6961
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
vdb-entry
http://www.securityfocus.com/bid/104185
exploit
https://www.exploit-db.com/exploits/44959/
vdb-entry
http://www.securitytracker.com/id/1041210
x_refsource_CONFIRM
http://www.vmware.com/security/advisories/VMSA-2018-0011.html