VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability

HIGH 8.1EXPLOITED (CISA KEV)CVE-2018-6961 · Published 11/06/2018 · updated 17/06/2026

VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 25/03/2022. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
nsx sd-wan by velocloud vmware	`< 3.1.0`	`3.1.0`

Description

VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled by default and should not be enabled on untrusted networks. VeloCloud by VMware will be removing this service from the product in future releases. Successful exploitation of this issue could result in remote code execution.

References

securityfocus.com/bid/104185 · Broken Link
securitytracker.com/id/1041210 · Broken Link
vmware.com/security/advisories/VMSA-2018-0011.html · Vendor Advisory
exploit-db.com/exploits/44959 · Exploit
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2018-6961

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free