by Kastro
Paper/Archive/CVE-2023-20893

CVE-2023-20893

VMware VMware vCenter Server (vCenter Server) — The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the DCERPC protocol.

EPSS 1%public exploitCVSS 9.8
critical.is priorityof 100
53
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 69.3.694 × 2013.9Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may exploit this issue to execute arbitrary code on the underlying operating system that hosts vCenter Server.

Affected

ProductAffectedFixed inSource
VMware vCenter Server (vCenter Server)8.0 – < 8.0 U1b8.0 U1bCNA
VMware vCenter Server (vCenter Server)7.0 – < 7.0 u3m7.0 u3mCNA
VMware Cloud Foundation (vCenter Server)5.x – < 7.0 U3m, 8.0 U1b7.0 U3m, 8.0 U1bCNA
VMware Cloud Foundation (vCenter Server)4.x – < 7.0 U3m, 8.0 U1b7.0 U3m, 8.0 U1bCNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vmware (CNA)8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

refvmware.com/security/advisories/VMSA-2023-0014.htmlreftalosintelligence.com/vulnerability_reports/TALOS-2023-1799