Ransomwarehigh

Ransomware gangs exploit VMware ESXi bug CVE-2024

Security Affairsby @securityaffairsJul 29, 2024 · 20:55 UTC (Jul 29, 2024)2 min read5 · 2 reads

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-37085 CVE-2023-28252

Tags: cve-2024-37085 cve-2023-28252 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-28252	Heap Overflow in Microsoft Windows CLFS Driver Enables Local Privilege Escalation	7.8	49%	KEVRansomwarePoC	Apr 11, 2023 KEV Apr 11, 2023
CVE-2024-37085	Authentication Bypass in VMware ESXi via AD Group Recreation	7.2	27%	KEVRansomware	Jun 25, 2024 KEV Jul 30, 2024

From the original article

2 min read at securityaffairs.com

Microsoft warns that ransomware gangs are exploiting the recently patched CVE-2024-37085 flaw in VMware ESXi flaw. Microsoft researchers warned that multiple ransomware gangs are exploiting the recently patched vulnerability CVE-2024-37085 (CVSS score of 6. 8) in VMware ESXi flaw.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.