Vulnerabilitycritical

VMware fixes critical vCenter Server RCE vulnerability, urges immediate action (CVE-2021-21985)

Help Net Securityby @zeljkazorzDec 13, 2023 · 14:47 UTC (Dec 13, 2023)2 min read3 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2021-21985 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-21985 CVE-2021-21986

Tags: cve-2021-21985 cve-2021-21986 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-21985 +1 related CVE CVE-2021-21986	Remote Code Execution in VMware vCenter Server vSAN Health Check plug-in	9.8	100%	KEVRansomwarePoC	May 26, 2021 KEV Nov 3, 2021

From the original article

2 min read at helpnetsecurity.com

VMware has patched two vulnerabilities (CVE-2021-21985, CVE-2021-21986) affecting VMware vCenter Server and VMware Cloud Foundation and is urging administrators to implement the offered security updates as soon as possible. “All environments are different, have different tolerance for risk, and have different security controls and defense-in-depth to mitigate risk, so the decision on how to proceed is up to you.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.