CVE-2024-38813 VMware vCenter Server Privilege Escalation Vulnerability

KNOWN EXPLOITED VULNERABILITY

CISA KEV 处置信息

已确认在野利用

加入 KEV: 2024/11/20
整改期限: 2024/12/11已逾期 678 天
CISA 厂商: VMware
CISA 产品: vCenter Server

要求采取的措施

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CISA 说明

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968 ; https://nvd.nist.gov/vuln/detail/CVE-2024-38813

漏洞描述

VMware vCenter contains an improper check for dropped privileges vulnerability. This vulnerability could allow an attacker with network access to the vCenter Server to escalate privileges to root by sending a specially crafted packet.

影响产品

暂无结构化产品信息。

修复建议