Threat intelligence report · CISA KEV

CVE-2018-6961: VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability

VMware SD-WAN Edge by VeloCloud contains a command injection vulnerability in the local web UI component. Successful exploitation of this issue could result in remote code execution. Required action: Apply updates per vendor instructions.

· high severity · unattributed attribution

Evidence and provenance

Original source
CISA KEV report ↗
Published
2022-03-25T00:00:00Z
Confidence basis
No actor match
Record ID
d027d31f8fd860319bc0

Vulnerabilities

CVE-2018-6961

Use and citation

Verify the original report before making operational decisions. Cite this permanent page together with the original source, publication date, confidence level, and review status.