Skip to content
fr Sign in
6.7 Medium

CVE-2024-38817 VMware NSX contains a command injection vulnerability.  A malicious actor with access to the NSX Edge CLI terminal may…

Description

VMware NSX contains a command injection vulnerability.  A malicious actor with access to the NSX Edge CLI terminal may be able to craft malicious payloads to execute arbitrary commands on the operating system as root.

Affected products and versions

Product Affected versions Fixed in
VMware NSX, VMware Cloud Foundation Versions not published
NSX 4.1 4.1.0 → < 4.2.1 4.2.1
nsx-t 3.2 3.2.0 → < 3.2.4.1 3.2.4.1
cloud_foundation 5.0 5.0 → latest No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of VMware NSX, VMware Cloud Foundation

The 3 CVEs of VMware NSX, VMware Cloud Foundation →
CVE-2024-38815 VMware NSX contains a content spoofing vulnerability.  An unauthenticated malicious actor may be able to craft a URL and… 4.3 Medium CVE-2024-38818 VMware NSX contains a local privilege escalation vulnerability.  An authenticated malicious actor may exploit this… 6.7 Medium
Track this CVE