Exploit / PoCcriticalExploited in the wild

Recently disclosed VMware vCenter Server bugs are actively exploited in attacks

Security Affairsby @securityaffairsNov 18, 2024 · 20:45 UTC (Nov 18, 2024)2 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-38812 CVE-2024-38813 CVE-2024-37079 CVE-2024-37080

Tags: cve-2024-38812 cve-2024-38813 cve-2024-37079 cve-2024-37080 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-37079	Out-of-bounds Write in Broadcom VMware vCenter Server DCERPC Enables RCE	9.8	22%	KEV	Jun 18, 2024 KEV Jan 23, 2026
CVE-2024-37080	vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol	9.8	12%		Jun 18, 2024
CVE-2024-38812 +1 related CVE CVE-2024-38813	Unauthenticated RCE in VMware vCenter Server via DCERPC heap overflow	9.8	55%	KEV	Sep 17, 2024 KEV Nov 20, 2024

From the original article

2 min read at securityaffairs.com

Threat actors are actively exploiting two VMware vCenter Server vulnerabilities tracked as CVE-2024-38812 and CVE-2024-38813, Broadcom warns. Broadcom warns that the two VMware vCenter Server vulnerabilities CVE-2024-38812 and CVE-2024-38813 are actively exploited in the wild. “Updated advisory to note that VMware by Broadcom confirmed that exploitation has occurred in the wild for CVE-2024-38812 and CVE-2024-38813.”

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.