Malwarehigh

Experts detailed a previously undetected VMware ESXi backdoor

Security Affairsby @securityaffairsDec 13, 2022 · 14:15 UTC (Dec 13, 2022)2 min read4 · 3 reads

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2019-5544 CVE-2020-3992

Tags: cve-2019-5544 cve-2020-3992 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-5544	Heap-Based Buffer Overflow in OpenSLP Used by VMware ESXi and Horizon DaaS	9.8	98%	KEVRansomware	Dec 6, 2019 KEV Nov 3, 2021
CVE-2020-3992	Use-After-Free RCE in VMware ESXi OpenSLP Service (Port 427)	9.8	83%	KEVRansomware	Oct 20, 2020 KEV Nov 3, 2021

From the original article

2 min read at securityaffairs.com

A new Python backdoor is targeting VMware ESXi servers, allowing attackers to take over compromised systems. Juniper Networks researchers spotted a previously undocumented Python backdoor targeting VMware ESXi servers. The researchers discovered the backdoor in October 2022, experts pointed out the implant is notable for its simplicity, persistence and capabilities.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.