CVE-2021-21972 VMware vSphere Client (HTML5) - Remote Code Execution

漏洞描述

VMware vCenter vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server. This affects VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2).

影响产品

威睿cloud_foundation查看产品 →

修复建议

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

参考链接

swarm.ptsecurity.comhttps://swarm.ptsecurity.com/unauth-rce-vmware/↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2021-21972↗www.vmware.comhttps://www.vmware.com/security/advisories/VMSA-2021-0002.html↗packetstormsecurity.comhttp://packetstormsecurity.com/files/161590/VMware-vCenter-Server-7.0-Arbitrary-File-Upload.html↗github.comhttps://github.com/NS-Sp4ce/CVE-2021-21972↗

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2022-31678 VMWare Cloud Foundation NSX-V - XML External Entity (XXE) cloud_foundation	严重	—	—	PoCEXP	2026/02/26
CVE-2022-22960 CVE-2022-22960 cloud_foundation identity_manager	高危	7.8	77.2%	PoCEXP	2022/04/13
CVE-2021-22005RCE VMware vCenter Server - Arbitrary File Upload cloud_foundation	严重	9.8	94.4%	PoCEXP	2021/09/22
CVE-2021-21975RCE vRealize Operations Manager API - Server-Side Request Forgery cloud_foundation	高危	7.5	94.4%	PoCEXP	2021/04/01
CVE-2021-21983 CVE-2021-21983 cloud_foundation	中危	6.5	83.2%	PoCEXP	2021/03/31
CVE-2021-21973 VMware vSphere - Server-Side Request Forgery cloud_foundation	中危	5.3	88.5%	PoCEXP	2021/02/25

利用情报状态

漏洞描述

影响产品

修复建议

参考链接

同产品关联漏洞