Vulnerabilitycritical

VMware addressed a critical flaw in vCenter Server. Patch it now!

Security Affairsby @securityaffairsSep 22, 2021 · 09:16 UTC (Sep 22, 2021)2 min read7 · 5 reads

Read at securityaffairs.com

Analyze CVE-2021-22005 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-22005 CVE-2021-21972 CVE-2021-21985

Tags: cve-2021-22005 cve-2021-21972 cve-2021-21985 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-21972	Unauthenticated RCE in VMware vCenter Server vSphere Client Plugin	9.8	100%	KEVRansomwarePoC ×3	Feb 24, 2021 KEV Nov 3, 2021
CVE-2021-21985	Remote Code Execution in VMware vCenter Server vSAN Health Check plug-in	9.8	100%	KEVRansomwarePoC	May 26, 2021 KEV Nov 3, 2021
CVE-2021-22005	Path Traversal File Upload RCE in VMware vCenter Server (Analytics Service)	9.8	100%	KEVRansomwarePoC	Sep 23, 2021 KEV Nov 3, 2021

From the original article

2 min read at securityaffairs.com

VMware addressed a critical arbitrary file upload vulnerability that affects the default configuration of vCenter Server 6. 7 and 7. 0 deployments.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.