CVE-2018-6961
high · 8.1Actively exploitedOn the CISA Known Exploited Vulnerabilities catalog
Apply updates per vendor instructions.
A public exploit / detection template exists
Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →
VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled by default and should not be enabled on untrusted networks. VeloCloud by VMware will be removing this service from the product in future releases. Successful exploitation of this issue could result in remote code execution.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| vmware | nsx_sd-wan_by_velocloud | < 3.1.0 |
Check a specific version with /api/v1/cve/match.
References
- http://www.securityfocus.com/bid/104185
- http://www.securitytracker.com/id/1041210
- http://www.vmware.com/security/advisories/VMSA-2018-0011.html
- https://www.exploit-db.com/exploits/44959/
- http://www.securityfocus.com/bid/104185
- http://www.securitytracker.com/id/1041210
- http://www.vmware.com/security/advisories/VMSA-2018-0011.html
- https://www.exploit-db.com/exploits/44959/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-6961
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2018-6961