CVE-2024-38813

Description

The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet.

References

https://isc.sans.edu/diary/rss/31510

https://thehackernews.com/2024/11/cisa-alert-active-exploitation-of.html

https://www.theregister.com/2024/11/18/vmware_vcenter_rce_exploited/

https://www.bleepingcomputer.com/news/security/critical-rce-bug-in-vmware-vcenter-server-now-exploited-in-attacks/

https://securityaffairs.com/171147/security/vmware-vcenter-server-bugs-actively-exploited.html

https://www.bleepingcomputer.com/news/security/vmware-fixes-bad-patch-for-critical-vcenter-server-rce-flaw/

https://www.securityweek.com/vmware-struggles-to-fix-flaw-exploited-at-chinese-hacking-contest/

https://thehackernews.com/2024/09/patch-issued-for-critical-vmware.html

https://cloud.google.com/support/bulletins/index#gcp-2024-051

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3