U.S. CISA adds a flaw in Broadcom VMware vCenter Server to its Known Exploited Vulnerabilities catalog
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-37079 | Out-of-bounds Write in Broadcom VMware vCenter Server DCERPC Enables RCE | 9.8 | 22% | KEV | KEV |
| CVE-2024-37080 | vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol | 9.8 | 12% | ||
CVE-2024-38812+1 related CVE | Unauthenticated RCE in VMware vCenter Server via DCERPC heap overflow | 9.8 | 55% | KEV | KEV |
From the original article
2 min read at securityaffairs.com
The U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw impacting Broadcom VMware vCenter to its Known Exploited Vulnerabilities catalog.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.