Vulnerabilityhigh
Hackers exploit VMware vulnerability that gives them hypervisor admin
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-28252 | Heap Overflow in Microsoft Windows CLFS Driver Enables Local Privilege Escalation | 7.8 | 49% | KEVRansomwarePoC | KEV |
| CVE-2024-37085 | Authentication Bypass in VMware ESXi via AD Group Recreation | 7.2 | 27% | KEVRansomware | KEV |
From the original article
4 min read at arstechnica.com
Create new group called “ESX Admins” and ESXi automatically gives it admin rights. Microsoft is urging users of VMware’s ESXi hypervisor to take immediate action to ward off ongoing attacks by ransomware groups that give them full administrative control of the servers the product runs on.
arstechnica.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.