Vulnerabilitycritical

VMware fixed RCE and privilege escalation bugs in vCenter Server

Security Affairsby @securityaffairsJun 18, 2024 · 17:23 UTC (Jun 18, 2024)1 min read2

Read at securityaffairs.com

Analyze CVE-2024-37079 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2024-37079 CVE-2024-37080 CVE-2024-37081

Tags: cve-2024-37079 cve-2024-37080 cve-2024-37081 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-37079	Out-of-bounds Write in Broadcom VMware vCenter Server DCERPC Enables RCE	9.8	22%	KEV	Jun 18, 2024 KEV Jan 23, 2026
CVE-2024-37080 +1 related CVE CVE-2024-37081	vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol	9.8 group max	12%		Jun 18, 2024

From the original article

1 min read at securityaffairs.com

VMware addressed vCenter Server vulnerabilities that can allow remote code execution or privilege escalation. VMware addressed multiple vCenter Server vulnerabilities that remote attackers can exploit to achieve remote code execution or privilege escalation. vCenter Server is a centralized management platform developed by VMware for managing virtualized environments.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.