by Kastro
Paper/Archive/CVE-2023-34048

CVE-2023-34048

VMware VMware vCenter Server — VMware vCenter Server Out-of-Bounds Write Vulnerability

KEV · due 12 FebEPSS 99%public exploitSSVC actCVSS 9.8
critical.is priorityof 100
99
CVSS 9.8 (CNA)9.8 / 10 × 3029.4In CISA KEV+3030.0EPSS percentile 99.9.999 × 2020.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds write potentially leading to remote code execution.

Affected

ProductAffectedFixed inSource
VMware vCenter Server8.0 – < 8.0U28.0U2CNA
VMware vCenter Server7.0 – < 7.0U3o7.0U3oCNA
VMware Cloud Foundation (VMware vCenter Server)5.x–CNA
VMware Cloud Foundation (VMware vCenter Server)4.x–CNA
vcenter_server7.0 – < 7.0U3o7.0U3oCISA-ADP
vcenter_server8.0 – < 8.0U28.0U2CISA-ADP
cloud_foundation4.0 – < KB88287KB88287CISA-ADP
cloud_foundation5.0 – < KB88287KB88287CISA-ADP

Scores by source

vmware (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: no · Technical impact: total

References

refvmware.com/security/advisories/VMSA-2023-0023.htmlrefcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-34048refvicarius.io/vsociety/posts/understanding-cve-2023-34048-a-zero-day-out-of-bound-write-in-vcenter-serverkevcisa.gov/known-exploited-vulnerabilities-catalog