Vulnerability · Published Oct 9, 2024 · Assigned by vmware
CVE-2024-38817
Medium 6.7
In plain English
A medium-severity command injection in VMware NSX, VMware Cloud Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).
Severity (CVSS 3.1)6.7Medium
Exploit odds (30 days)0.5%top 55.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
VMware NSX contains a command injection vulnerability. A malicious actor with access to the NSX Edge CLI terminal may be able to craft malicious payloads to execute arbitrary commands on the operating system as root.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | VMware NSX, VMware Cloud Foundation | VMware NSX 4.1.x, NSX-T 3.2.x |
Weakness: CWE-77 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H