DeutschShown in its original language — a full translation is planned for a future version.
VMware vCenter Server und VMware Cloud Foundation: Mehrere Schwachstellen ermöglichen Codeausführung
view advisory published 2023-06-21
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VMware vCenter Server und VMware Cloud Foundation ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmechanismen zu umgehen und um einen Denial of Service Zustand herbeizuführen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-20896US | high7.5 | — | ||
The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may tri… | ||||
| CVE-2023-20895US | critical9.8 | — | ||
The VMware vCenter Server contains a memory corruption vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigg… | ||||
| CVE-2023-20894US | critical9.8 | — | ||
The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may tr… | ||||
| CVE-2023-20893US | critical9.8 | — | ||
The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may exploit… | ||||
| CVE-2023-20892US | critical9.8 | — | ||
The vCenter Server contains a heap overflow vulnerability due to the usage of uninitialized memory in the implementation of the DCERPC protocol. A malicious actor with network acce… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan