Vulnerabilitycritical
VMware Discloses Critical Vulnerabilities, Urges Immediate Remediation
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-37079 | Out-of-bounds Write in Broadcom VMware vCenter Server DCERPC Enables RCE | 9.8 | 22% | KEV | KEV |
CVE-2024-37080+1 related CVE | vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol | 9.8 group max | 12% |
From the original article
2 min read at infosecurity-magazine.com
VMware has disclosed critical vulnerabilities impacting its VMware vSphere and VMware Cloud Foundation products, urging customers to immediately install updates containing patches. The issues are in the VMware vCenter Server, which is present in the affected products. In a critical security advisory published on June 17, 2024, the cloud computing firm highlighted three CVEs with severity scores ranging from 7.
By James Coker · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.