U.S. CISA adds a flaw in Broadcom VMware vCenter Server to its Known Exploited Vulnerabilities catalog
60
Vulnerability2 · 1 read
CVE-2024-37080
- CVSS 3.1
- 9.8 critical
- EPSS
- 12%p96
- Published
- ·
- Modified
Description · NVD
vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
- Vendors
- vmware
- Products
- vcenter server
- Weakness
- CWE-787, CWE-122
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
In the news
10 storiesCISA Adds Actively Exploited VMware vCenter Flaw CVE-2024
60
Recently disclosed VMware vCenter Server bugs are actively exploited in attacks
60
60
60
60
60
60
VMware Discloses Critical Vulnerabilities, Urges Immediate Remediation
60
VMware Issues Patches for Cloud Foundation, vCenter Server, and vSphere ESXi
60