CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2018-06-11
VMware NSX SD-WAN Edge (VeloCloud) Local Web UI Remote Command Injection and Code Execution (CVE-2018-6961)
[Affected Scope] VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 with the local web UI component enabled.
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges, leading to complete compromise of the SD-WAN appliance.
[Mitigation] Immediately upgrade to version 3.1.0 or higher, or disable the local web UI service and restrict access from untrusted networks.