Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2024-38817

VMware NSX contains a command injection vulnerability. 

Description

VMware NSX contains a command injection vulnerability.  A malicious actor with access to the NSX Edge CLI terminal may be able to craft malicious payloads to execute arbitrary commands on the operating system as root.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a VMware NSX, VMware Cloud Foundation

Default version status: unaffected

  • VMware NSX 4.1.x, NSX-T 3.2.xaffected

References