Microsoft calls out apparent ESXi vulnerability that some researchers say is a ‘nothing burger’
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-37085 | Authentication Bypass in VMware ESXi via AD Group Recreation | 7.2 | 27% | KEVRansomware | KEV |
From the original article
4 min read at cyberscoop.com
Attackers exploited the vulnerability by creating an admins group and adding new users to it, Microsoft researchers say. The logo of American cloud computing and virtualization technology company VMware is seen at the Mobile World Congress (MWC), the telecom industry's biggest annual gathering, in Barcelona on March 2, 2023.
By @AJVicens · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.