CVE-2018-6961: VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability
VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled by default and should not be enabled on untrusted networks. VeloCloud by VMware will be removing this service from the product in future releases. Successful exploitation of this issue could result in remote code execution.
Other sources
VMware SD-WAN Edge by VeloCloud contains a command injection vulnerability in the local web UI component. Successful exploitation of this issue could result in remote code execution.
— CISA
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
VMware NSX SD-WAN Edge by VeloCloudto a version that resolves this vulnerability.Fixed in 3.1.0 - Configuration
Ensure the local web UI component remains disabled on untrusted networks.
VMware NSX SD-WAN Edge local web UI component local web UI service enablement = disabled - Compensating control
Do not enable the local web UI component on untrusted networks (limit exposure of the local web UI service).
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2018-6961.
What is the title of this vulnerability?
The title of this vulnerability is VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability.
What is the severity level of CVE-2018-6961?
The severity level of CVE-2018-6961 is high with a score of 8.1.
How can I fix the VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability (CVE-2018-6961)?
To fix the vulnerability, update VMware NSX SD-WAN Edge by VeloCloud to version 3.1.0 or later.
Where can I find more information about CVE-2018-6961?
You can find more information about CVE-2018-6961 in the following references: 1. [Security Focus](http://www.securityfocus.com/bid/104185) 2. [Security Tracker](http://www.securitytracker.com/id/1041210) 3. [VMware Security Advisories](http://www.vmware.com/security/advisories/VMSA-2018-0011.html)