ACTIEF MISBRUIKT
CVE-2024-38813: VMware vCenter Server Privilege Escalation Vulnerability
| Leverancier | VMware |
|---|---|
| Product | vCenter Server |
| Actief misbruikt | Ja |
| Toegevoegd aan CISA KEV | 20 nov 2024 |
| CISA-deadline (Amerikaanse overheid) | 11 dec 2024 |
| Zwakte (CWE) | CWE-250, CWE-273 |
Vereiste actie (tekst van CISA, Engels)
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Beschrijving (NVD, Engels)
VMware vCenter contains an improper check for dropped privileges vulnerability. This vulnerability could allow an attacker with network access to the vCenter Server to escalate privileges to root by sending a specially crafted packet.
BRONNEN
Andere lekken bij VMware
- CVE-2025-22226: VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
- CVE-2025-22225: VMware ESXi Arbitrary Write Vulnerability
- CVE-2025-22224: VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
- CVE-2024-38812: VMware vCenter Server Heap-Based Buffer Overflow Vulnerability
- CVE-2024-37085: VMware ESXi Authentication Bypass Vulnerability
Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.