Description
VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected products
- vmware / Cloud Foundation9.0.x.x – 9.0.x.x
- vmware / Cloud Foundation5.x – 5.x
- vmware / Cloud Foundation9.1.x.x – 9.1.x.x
- vmware / Telco Cloud Infrastructure3.0 – 3.0
- vmware / Telco Cloud Platform4.x – 4.x
- vmware / Telco Cloud Platform3.0 – 3.0
- vmware / Telco Cloud Platform5.1.x – 5.1.x
- vmware / Telco Cloud Platform5.0.x – 5.0.x
- vmware / vCenter9.1.x.x – 9.1.0.0300
- vmware / vCenter9.0.x.x – 9.0.2.0100
- vmware / vCenter8.0 – 8.0 U3k
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vSphere Foundation9.0.x.x – 9.0.x.x
- vmware / vSphere Foundation9.1.x.x – 9.1.x.x
News coverage
- Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived RansomwareThe Hacker News · 11d ago
- Critical VMware vCenter RCE flaw exploited for reverse SSH accessBleepingComputer · 14d ago
- Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote AccessThe Hacker News · 16d ago
Updated 6m ago · 8 sources