VulnerabilitycriticalExploited in the wild

Critical VMware vCenter Server bugs fixed (CVE-2024-38812)

Help Net Securityby @zeljkazorzNov 19, 2024 · 11:35 UTC (Nov 19, 2024)2 min read2 · 2 reads

Read at helpnetsecurity.com

Analyze CVE-2024-38812 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2024-38812 CVE-2024-38813 CVE-2023-34048

Tags: cve-2024-38812 cve-2024-38813 cve-2023-34048 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-34048	Unauthenticated Out-of-Bounds Write RCE in VMware vCenter Server	9.8	99%	KEVPoC	Oct 25, 2023 KEV Jan 22, 2024
CVE-2024-38812 +1 related CVE CVE-2024-38813	Unauthenticated RCE in VMware vCenter Server via DCERPC heap overflow	9.8	55%	KEV	Sep 17, 2024 KEV Nov 20, 2024

From the original article

2 min read at helpnetsecurity.com

Broadcom has released fixes for two vulnerabilities affecting VMware vCenter Server that can be triggered by sending a specially crafted network packet, and could lead to remote code execution (CVE-2024-38812) or privilege escalation (CVE-2024-38813).

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.