What’s Vulnerable › Vulnerabilities

CVE-2018-6968

• Severity: critical (CVSS 10.0 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-06-11 · updated 2026-06-17

Description

The VMware AirWatch Agent for Android prior to 8.2 and AirWatch Agent for Windows Mobile prior to 6.5.2 contain a remote code execution vulnerability in real time File Manager capabilities. This vulnerability may allow for unauthorized creation and execution of files in the Agent sandbox and other publicly accessible directories such as those on the SD card by a malicious administrator.

Affected products

• VMware Airwatch Agent: before 6.5.2; before 8.2 — fixed in 6.5.2, 8.2
• VMware Airwatch Agent: AirWatch Agent for Android prior to 8.2, AirWatch Agent for Windows Mobile prior to 6.5.2

How to fix

Upgrade to a fixed version: VMware Airwatch Agent 6.5.2, 8.2. Check the vendor advisory for mitigations.

References

• http://www.securityfocus.com/bid/104441
• http://www.securitytracker.com/id/1041060
• http://www.vmware.com/security/advisories/VMSA-2018-0015.html
• http://www.securityfocus.com/bid/104441
• http://www.securitytracker.com/id/1041060
• http://www.vmware.com/security/advisories/VMSA-2018-0015.html

Get alerted when CVE-2018-6968 or the next vulnerability affects your stack