VMware · vCenter Server
CVE-2021-21972
VMware vCenter Server Remote Code Execution Vulnerability
Nedir
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server. This affects VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2).
CISA: VMware vCenter Server vSphere Client contains a remote code execution vulnerability in a vCenter Server plugin which allows an attacker with network access to port 443 to execute commands with unrestricted privileges on the underlying operating system.
Ne yapmalı
Apply updates per vendor instructions.
ABD federal kurumları için son tarih: 17 Kasım 2021
- CISA listesine eklenme
- 3 Kasım 2021
- Yayımlanma
- 24 Şubat 2021
- Önem
- Kritik 9,8 CVSS 3.1
- Önümüzdeki 30 günde saldırı olasılığı (EPSS)
- 99,9% bilinen tüm açıkların en üstteki 0,1% diliminde
- Zayıflık
- CWE-23
- Daha fazla ayrıntı
- NVD · CVE.org · CISA
Tüm kaynaklar (4)
- https://www.vmware.com/security/advisories/VMSA-2021-0002.html
- http://packetstormsecurity.com/files/161590/VMware-vCenter-Server-7.0-Arbitrary-File-Upload.html
- http://packetstormsecurity.com/files/161695/VMware-vCenter-Server-File-Upload-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/163268/VMware-vCenter-6.5-6.7-7.0-Remote-Code-Execution.html
VMware için istismar edilen diğer açıklar
| Eklenme | Açık | Ürün | Önem | Saldırı olasılığı |
|---|---|---|---|---|
| 20 Kas 2024 | Heap-Based Buffer Overflow | vCenter Server | Kritik 9,8 | 55% |
| 20 Kas 2024 | Privilege Escalation | vCenter Server | Yüksek 7,5 | 17% |
| 17 Tem 2024 | Incorrect Default File Permissions Vulnerability | vCenter Server | Orta 6,5 | 13% |
| 22 Oca 2024 | Out-of-Bounds Write | vCenter Server | Kritik 9,8 | 99,2% |
| 10 Oca 2022 | Improper Access Control | vCenter Server | Orta 5,3 | 49% |
| 3 Kas 2021 | Information Disclosure | vCenter Server | Kritik 9,8 | 90% |
| 3 Kas 2021 | Improper Input Validation | vCenter Server | Kritik 9,8 | >99,9% |
| 3 Kas 2021 | File Upload | vCenter Server | Kritik 9,8 | >99,9% |
Kaynaklar: Known Exploited Vulnerabilities (CISA, kamu malı), CVE records (cve.org) ve EPSS (FIRST). Saldırı olasılığı, birinin önümüzdeki 30 günde açığı istismar etmeye çalışacağına dair EPSS tahminidir.