Vulnerabilitycritical

Attackers are looking to exploit critical VMware vCenter Server RCE flaw, patch ASAP!

Help Net Securityby @zeljkazorzFeb 25, 2021 · 00:00 UTC (Feb 25, 2021)2 min read8 · 1 read

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-21972 CVE-2019-19781 CVE-2021-21973 CVE-2021-21974

Tags: cve-2021-21972 cve-2019-19781 cve-2021-21973 cve-2021-21974 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-19781	Unauthenticated path traversal RCE in Citrix ADC, Gateway, and SD-WAN WANOP	9.8	100%	KEVRansomware	Dec 27, 2019 KEV Nov 3, 2021
CVE-2021-21972	Unauthenticated RCE in VMware vCenter Server vSphere Client Plugin	9.8	100%	KEVRansomwarePoC ×3	Feb 24, 2021 KEV Nov 3, 2021
CVE-2021-21973	SSRF in VMware vCenter Server and Cloud Foundation (vSphere Client HTML5)	5.3	88%	KEV	Feb 24, 2021 KEV Mar 7, 2022
CVE-2021-21974	OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5 before ESXi650-202102101-SG) has a heap-overflow vulnerability	8.8	45%	PoC	Feb 24, 2021

From the original article

2 min read at helpnetsecurity.com

The day after VMware released fixes for a critical RCE flaw (CVE-2021-21972) found in a default vCenter Server plugin, opportunistic attackers began searching for publicly accessible vulnerable systems. We've detected mass scanning activity targeting vulnerable VMware vCenter servers ( https://t. co/t3Gv2ZgTdt ).

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.