CVE-2018-6961

8.1

CVSS
High

PUBLISHED

VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component...

Exploited in the wild Remote No user interaction

Vendor: VMware
Product: NSX SD-WAN by VeloCloud
Published: Jun 11, 2018
EPSS: —

Description

VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled by default and should not be enabled on untrusted networks. VeloCloud by VMware will be removing this service from the product in future releases. Successful exploitation of this issue could result in remote code execution.

cisa nuclei_scanner

CVSS scores

CVSS v3.1 8.1 High

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 6.8

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitation status

Exploited in the wild

Recorded 2022-03-25 00:00:00 UTC · Source

SSVC decision points

Exploitation: active
Automatable: No
Technical impact: total

References

Known exploited vulnerability sources

Catalogues that list this CVE as a known exploited vulnerability.

Source	Added
CISA	Mar 25, 2022

Scanner integrations

Scanner	Reference	Detected
Nuclei	https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-6961.yaml	Jun 01, 2026

Potential proof of concepts

These PoCs are unverified and could contain malware. Use at your own risk.

r3dxpl0it/CVE-2018-6961

github · Created 2019-02-08 13:00:35 UTC · 5 stars

VMware NSX SD-WAN command injection vulnerability

bokanrb/CVE-2018-6961

github · Created 2018-09-12 19:44:15 UTC · 1 stars

veloCloud VMWare - Vulnerability

Vulnerability detail