Apply Patch on VMWare AVI Load Balancer to fix CVEs.

VMSA-2025-0011: VMware Avi Load Balancer addresses an authenticated blind SQL Injection vulnerability (CVE-2025-41233):

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25707?utm_campaign=VCF_FY25_VCF_SecurityAlert-VMSA-2025-0011_MKT_CM_3596&utm_content=VCF_FY25_VCF_SecurityAlert-VMSA-2025-0011_3596_Email_MKT_TRANS_EM_6213&utm_medium=email&utm_source=eloqua

Impacted Products:

VMware Avi Load Balancer

Environment version: 31.1.1

Fixed Version: 31.1.1-2p2

Matrix

Access AVI with the Admin username and password, and upload the patch software that I previously downloaded from the Broadcom Portal.

Ensure a backup has been taken before proceeding with the upgrade.

Now apply patch, Go to Administration and apply from there.

Click START

Click RETRIGGER PRE-CHECKS

Update in Progress.

Completed succesfully.

After patching, all Nodes Vitals are in a healthy state.