Ransomwarehigh
Legacy VMware Bug Exploited in Global Ransomware Campaign
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-21974 | OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5 before ESXi650-202102101-SG) has a heap-overflow vulnerability | 8.8 | 45% | PoC |
From the original article
1 min read at infosecurity-magazine.com
VMware customers are being urged to patch a vulnerability on their ESXi hypervisors first disclosed in 2021, in order to mitigate the impact of an ongoing ransomware campaign. Government cybersecurity experts in France, Singapore and elsewhere have sounded the alarm after reports emerged of servers being compromised in Italy, France, Finland, the US and Canada.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.