by Kastro
Paper/Archive/CVE-2021-22005

CVE-2021-22005

VMware vCenter Server — VMware vCenter Server File Upload Vulnerability

KEV · due 17 Novransomware useEPSS 100%public exploitSSVC actCVSS 9.8
critical.is priorityof 100
99
CVSS 9.8 (ADP)9.8 / 10 × 3029.4In CISA KEV+3030.0EPSS percentile 100.01.000 × 2020.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file.

Affected

ProductAffectedFixed inSource
VMware vCenter Server, VMware Cloud FoundationVMware vCenter Server(7.x before 7.0 U2c and 6.7 before 6.7 U3o) and VMware Cloud Foundation (4.x before 4.3 and 3.x before 3.10.2.2)–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refvmware.com/security/advisories/VMSA-2021-0020.htmlrefpacketstormsecurity.com/files/164439/VMware-vCenter-Server-Analytics-CEIP-Service-File-Upload.htmlrefcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22005kevcisa.gov/known-exploited-vulnerabilities-catalog