ZeroDay Findings
Sign inSign up

Findings

CVE-2018-6961

VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability

Published Jun 11, 2018 · updated Jun 16, 2026 · vmware nsx sd-wan by velocloud

VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled by default and should not be enabled on untrusted networks. VeloCloud by VMware will be removing this service from the product in future releases. Successful exploitation of this issue could result in remote code execution.

Timeline

Detection, updates, and resolution for this record.

  1. Jun 11, 2018 · Catalog

    Detected

    VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled by default and should not be enabled on untrusted networks. VeloCloud by VMware will be removing this service from the product in future releases. Successful exploitation of this issue could result in remote code execution.

  2. Mar 25, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Apr 15, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled by default and should not be enabled on untrusted networks. VeloCloud by VMware will be removing this service from the product in future releases. Successful exploitation of this issue could result in remote code execution.

Required action

Apply updates per vendor instructions.

CISA due date Apr 15, 2022

Affected

  • cpe vmware/nsx sd-wan by velocloudversion unspecified
  • vendor VMware SD-WAN Edgeversion unspecified

Sources

  • CISA KEVCVE-2018-6961

    VMware SD-WAN Edge by VeloCloud contains a command injection vulnerability in the local web UI component. Successful exploitation of this issue could result in remote code execution.

    cisa.gov
  • CVE.orgCVE-2018-6961

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2018-6961

    30-day exploitation probability 86.3%

    first.org
  • Exploit Database44959

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • NIST NVDCVE-2018-6961

    VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled by default and should not be enabled on untrusted networks. VeloCloud by VMware will be removing this service from the p

    nvd.nist.gov

References