Vulnerabilitycritical

Critical RCE Vulnerability Found in VMware vCenter Server — Patch Now!

The Hacker Newsby @TheHackersNewsMay 26, 2021 · 04:57 UTC (May 26, 2021)2 min read3

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-21985 CVE-2021-21986 CVE-2021-21972 CVE-2021-21984

Tags: cve-2021-21985 cve-2021-21986 cve-2021-21972 cve-2021-21984 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-21972	Unauthenticated RCE in VMware vCenter Server vSphere Client Plugin	9.8	100%	KEVRansomwarePoC ×3	Feb 24, 2021 KEV Nov 3, 2021
CVE-2021-21984	VMware vRealize Business for Cloud 7.x prior to 7.6.0 contains a remote code execution vulnerability due to an unauthorised end point	9.8	2%		May 7, 2021
CVE-2021-21985 +1 related CVE CVE-2021-21986	Remote Code Execution in VMware vCenter Server vSAN Health Check plug-in	9.8	100%	KEVRansomwarePoC	May 26, 2021 KEV Nov 3, 2021

From the original article

2 min read at thehackernews.com

VMware has rolled out patches to address a critical security vulnerability in vCenter Server that could be leveraged by an adversary to execute arbitrary code on the server. Tracked as CVE-2021-21985 (CVSS score 9. 8), the issue stems from a lack of input validation in the Virtual SAN ( vSAN ) Health Check plug-in, which is enabled by default in the vCenter Server.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.