Vulnerabilitycritical

Critical RCE flaws in vCenter Server fixed (CVE-2024-37079, CVE-2024-37080)

Help Net Securityby @zeljkazorzAug 28, 2024 · 15:26 UTC (Aug 28, 2024)2 min read1 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2024-37079 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2024-37079 CVE-2024-37080 CVE-2024-37081

Tags: cve-2024-37079 cve-2024-37080 cve-2024-37081 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-37079	Out-of-bounds Write in Broadcom VMware vCenter Server DCERPC Enables RCE	9.8	22%	KEV	Jun 18, 2024 KEV Jan 23, 2026
CVE-2024-37080 +1 related CVE CVE-2024-37081	vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol	9.8 group max	12%		Jun 18, 2024

From the original article

2 min read at helpnetsecurity.com

VMware by Broadcom has fixed two critical vulnerabilities (CVE-2024-37079, CVE-2024-37080) affecting VMware vCenter Server and products that contain it: vSphere and Cloud Foundation.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.