Actively exploited in the wild
VMware vCenter Server Heap-Based Buffer Overflow Vulnerability
VMware - vCenter Server · Listed in the CISA KEV since 2024-11-20. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2024-38812
CriticalCVSS 9.8KEVSummary
vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet, potentially leading to remote code execution.
Risk Assessment
The vulnerability could allow an unauthenticated attacker with network access to take control of the vCenter server, posing a critical risk to the entire virtualization infrastructure.
Recommendation
Apply the available security updates for vCenter Server as soon as possible and restrict network access to the vCenter management interface.
Other vulnerabilities in vCenter Server
See all- CVE-2024-37079CriticalActively exploited
vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
- CVE-2022-22948MediumActively exploited
The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.
- CVE-2021-22017MediumActively exploited
Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to bypass proxy leading to internal endpoints being accessed.
Original NVD description (English source)
The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS