CVE Watch—

CVE-2023-34048

VMware vCenter Server Out-of-Bounds Write Vulnerability

CVSS

—

No CVSS

EPSS

99.4%

p100

KEV

YES

Jan 22, 2024

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

99.4%EPSS · 30 days99.4%

2026-06-302026-07-16

KEV catalog record

Product

VMware / vCenter Server

Vulnerability

VMware vCenter Server Out-of-Bounds Write Vulnerability

Added to KEV

Jan 22, 2024

Remediate by

Feb 12, 2024

Known ransomware use

Summary description

VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol that allows an attacker to conduct remote code execution.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://www.vmware.com/security/advisories/VMSA-2023-0023.html; https://nvd.nist.gov/vuln/detail/CVE-2023-34048

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2021-21985—

100.0%

KEV—80VMware vCenter Server Improper Input Validation Vulnerability—CVE-2021-22005—

100.0%

KEV—80VMware vCenter Server File Upload Vulnerability—CVE-2021-21972—

99.9%

KEV—80VMware vCenter Server Remote Code Execution Vulnerability—CVE-2020-3952—

99.8%

KEV—80VMware vCenter Server Information Disclosure Vulnerability—CVE-2024-38812—

98.9%

KEV—80VMware vCenter Server Heap-Based Buffer Overflow Vulnerability—CVE-2021-22017—

98.7%

KEV—80VMware vCenter Server Improper Access Control—