<\/div>\n

VMware addressed vCenter Server vulnerabilities that can allow remote code execution or privilege escalation.<\/h2>\n\n\n\n

VMware addressed multiple vCenter Server vulnerabilities that remote attackers can exploit to achieve remote code execution or privilege escalation.<\/p>\n\n\n\n

vCenter Server is a centralized management platform developed by VMware for managing virtualized environments.<\/p>\n\n\n\n

The vCenter Server contains multiple heap-overflow flaws, tracked as CVE-2024-37079,\u00a0CVE-2024-37080 (maximum CVSSv3 base score 9.8), in the implementation of the DCERPC protocol. <\/p>\n\n\n\n

“<\/strong>A malicious actor with network access to vCenter Server may trigger these vulnerabilities by sending a specially crafted network packet potentially leading to remote code execution.” reads the advisory<\/strong><\/a> published by the company.<\/p>\n\n\n\n

Customers are recommended to install the released security patches, no workarounds are available.<\/p>\n\n\n\n

The vulnerabilities were reported by Hao Zheng (@zhz) and Zibo Li (@zbleet) from TianGong Team of Legendsec at Qi’anxin Group.<\/gwmw><\/p>\n\n\n\n

VMware also addressed multiple local privilege escalation vulnerabilities, tracked as CVE-2024-37081 (maximum CVSSv3 base score of\u00a07.8), in the vCenter Server.\u00a0<\/p>\n\n\n\n

“The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo.” reads the advisory. “An authenticated local user with non-administrative privileges may exploit these issues to elevate privileges to root on vCenter Server Appliance.”<\/em><\/p>\n\n\n\n

The issue was reported by Matei “Mal” Badanoiu from Deloitte Romania<\/p>\n\n\n\n

VMware confirmed<\/a> that it is not aware of attacks in the wild exploiting these issues.<\/gwmw><\/gwmw><\/p>\n\n\n\n

The following table reports impacted products and fixed versions:<\/p>\n\n\n\n

VMware Product<\/strong><\/td>	Version<\/strong><\/td>	Running On<\/strong><\/td>	CVE<\/strong><\/td>	CVSSv3<\/strong><\/td>	Severity<\/strong><\/td>	Fixed Version<\/strong><\/td>	Workarounds<\/strong><\/td>	Additional Documentation<\/strong><\/td><\/tr>
vCenter Server <\/td>	8.0<\/td>	Any<\/td>	CVE-2024-37079, CVE-2024-37080, CVE-2024-37081<\/td>	9.8<\/a>, 9.8<\/a>, 7.8<\/a><\/td>	Critical<\/td>	8.0 U2d<\/a><\/td>	None<\/td>	FAQ<\/a><\/td><\/tr>
vCenter Server <\/td>	8.0<\/td>	Any<\/td>	CVE-2024-37079, CVE-2024-37080<\/td>	9.8<\/a>, 9.8<\/a><\/td>	Critical<\/td>	8.0 U1e<\/a><\/td>	None<\/td>	FAQ<\/a><\/td><\/tr>
vCenter Server<\/td>	7.0<\/td>	Any<\/td>	CVE-2024-37079, CVE-2024-37080, CVE-2024-37081<\/td>	9.8<\/a>, 9.8<\/a>, 7.8<\/a><\/td>	Critical<\/td>	7.0 U3r<\/a><\/td>	None<\/td>	FAQ<\/a><\/td><\/tr><\/tbody><\/table>