Vulnerabilitycritical

VMware addresses a critical RCE issue in vCenter Server

Security Affairsby @securityaffairsFeb 23, 2021 · 22:39 UTC (Feb 23, 2021)1 min read8 · 2 reads

Read at securityaffairs.com

Analyze CVE-2021-21972 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-21972 CVE-2021-21973 CVE-2021-21974

Tags: cve-2021-21972 cve-2021-21973 cve-2021-21974 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-21972	Unauthenticated RCE in VMware vCenter Server vSphere Client Plugin	9.8	100%	KEVRansomwarePoC ×3	Feb 24, 2021 KEV Nov 3, 2021
CVE-2021-21973	SSRF in VMware vCenter Server and Cloud Foundation (vSphere Client HTML5)	5.3	88%	KEV	Feb 24, 2021 KEV Mar 7, 2022
CVE-2021-21974	OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5 before ESXi650-202102101-SG) has a heap-overflow vulnerability	8.8	45%	PoC	Feb 24, 2021

From the original article

1 min read at securityaffairs.com

VMware addressed a critical remote code execution flaw, tracked as CVE-2021-21972, in vCenter Server virtual infrastructure management platform. VMware has addressed a critical remote code execution (RCE) vulnerability in the vCenter Server virtual infrastructure management platform, tracked as CVE-2021-21972 , that could be exploited by attackers to potentially take control of affected systems.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.