Actively exploited in the wild
VMware vCenter Server Heap-Based Buffer Overflow Vulnerability
VMware - vCenter Server · Listed in the CISA KEV since 2024-11-20. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2024-38812
CriticalCVSS 9.8KEVSummary
vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet, potentially leading to remote code execution.
Risk Assessment
The vulnerability could allow an unauthenticated attacker with network access to take control of the vCenter server, posing a critical risk to the entire virtualization infrastructure.
Recommendation
Apply the available security updates for vCenter Server as soon as possible and restrict network access to the vCenter management interface.
Other vulnerabilities in vCenter Server
Original NVD description (English source)
The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.