U.S. CISA adds a flaw in Broadcom VMware vCenter Server to its Known Exploited Vulnerabilities catalog
60
CVE-2024-37080
—CVSS 3.1
9.8 critical
EPSS
12%p96
Published
()
Modified
Description
vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
- Vendors
- vmware
- Products
- vcenter server
- Weakness
- CWE-787, CWE-122
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
In the news10 stories
60
Recently disclosed VMware vCenter Server bugs are actively exploited in attacks
60
60
60
60
60
60
60
VMware Issues Patches for Cloud Foundation, vCenter Server, and vSphere ESXi
60