CVE Watch—

CVE-2024-38812

VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

CVSS

—

Sin CVSS

EPSS

54.1%

p99

KEV

SÍ

20 nov 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

54.1%EPSS · 30 días54.1%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

VMware / vCenter Server

Vulnerabilidad

VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

Añadido a KEV

20 nov 2024

Remediar antes de

11 dic 2024

Uso conocido en ransomware

Descripción resumida

VMware vCenter Server contains a heap-based buffer overflow vulnerability in the implementation of the DCERPC protocol. This vulnerability could allow an attacker with network access to the vCenter Server to execute remote code by sending a specially crafted packet.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968 ; https://nvd.nist.gov/vuln/detail/CVE-2024-38812

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2021-21985—

100.0%

KEV—80VMware vCenter Server Improper Input Validation Vulnerability—CVE-2021-22005—

100.0%

KEV—80VMware vCenter Server File Upload Vulnerability—CVE-2023-34048—

99.9%

KEV—80VMware vCenter Server Out-of-Bounds Write Vulnerability—CVE-2021-21972—

99.9%

KEV—80VMware vCenter Server Remote Code Execution Vulnerability—CVE-2020-3952—

99.8%

KEV—80VMware vCenter Server Information Disclosure Vulnerability—CVE-2021-22017—

98.7%

KEV—80VMware vCenter Server Improper Access Control—