VulnerabilitycriticalExploited in the wild

VMware Issues Patches for Cloud Foundation, vCenter Server, and vSphere ESXi

The Hacker Newsby @TheHackersNewsJun 18, 2024 · 08:24 UTC (Jun 18, 2024)1 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-37079 CVE-2024-37080 CVE-2024-37081 CVE-2023-34048

Tags: cve-2024-37079 cve-2024-37080 cve-2024-37081 cve-2023-34048 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-34048	Unauthenticated Out-of-Bounds Write RCE in VMware vCenter Server	9.8	99%	KEVPoC	Oct 25, 2023 KEV Jan 22, 2024
CVE-2024-37079	Out-of-bounds Write in Broadcom VMware vCenter Server DCERPC Enables RCE	9.8	22%	KEV	Jun 18, 2024 KEV Jan 23, 2026
CVE-2024-37080 +1 related CVE CVE-2024-37081	vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol	9.8 group max	12%		Jun 18, 2024

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Jun 18, 2024 Network Security / Vulnerability VMware has released updates to address critical flaws impacting Cloud Foundation, vCenter Server, and vSphere ESXi that could be exploited to achieve privilege escalation and remote code execution. CVE-2024-37079 & CVE-2024-37080 (CVSS scores: 9.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.