VMware · SD-WAN Edge
CVE-2018-6961
VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability
Was es ist
VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled by default and should not be enabled on untrusted networks. VeloCloud by VMware will be removing this service from the product in future releases. Successful exploitation of this issue could result in remote code execution.
CISA: VMware SD-WAN Edge by VeloCloud contains a command injection vulnerability in the local web UI component. Successful exploitation of this issue could result in remote code execution.
Was zu tun ist
Apply updates per vendor instructions.
Frist für US-Bundesbehörden: 15. April 2022
Weitere ausgenutzte Schwachstellen von VMware
| Hinzugefügt | Schwachstelle | Produkt | Schweregrad | Angriffswahrscheinlichkeit |
|---|---|---|---|---|
| 04.03.2025 | TOCTOU Race Condition | ESXi and Workstation | Kritisch 9,3 | 1,6% |
| 04.03.2025 | Arbitrary Write | ESXi | Hoch 8,2 | 1,0% |
| 04.03.2025 | Information Disclosure | ESXi, Workstation, and Fusion | Hoch 7,1 | 1,6% |
| 20.11.2024 | Heap-Based Buffer Overflow | vCenter Server | Kritisch 9,8 | 55% |
| 20.11.2024 | Privilege Escalation | vCenter Server | Hoch 7,5 | 17% |
| 30.07.2024 | Authentication Bypass | ESXi | Mittel 6,8 | 27% |
| 17.07.2024 | Incorrect Default File Permissions Vulnerability | vCenter Server | Mittel 6,5 | 13% |
| 22.01.2024 | Out-of-Bounds Write | vCenter Server | Kritisch 9,8 | 99,2% |
Quellen: Known Exploited Vulnerabilities (CISA, gemeinfrei), CVE records (cve.org) und EPSS (FIRST). Die Angriffswahrscheinlichkeit ist die EPSS-Schätzung, dass jemand in den nächsten 30 Tagen versucht, die Schwachstelle auszunutzen.