Firetruck

CVE-2018-6961

KEV

VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability

View CVE record →
Vendor / Project
VMware
Product
SD-WAN Edge
Date added
Mar 25, 2022
Due date
Apr 15, 2022
Known ransomware use
Unknown
CWEs
CWE-78

Description

VMware SD-WAN Edge by VeloCloud contains a command injection vulnerability in the local web UI component. Successful exploitation of this issue could result in remote code execution.

Required action

Apply updates per vendor instructions.

Notes