by Kastro
Paper/Archive/CVE-2024-37079

CVE-2024-37079

Broadcom VMware vCenter Server — Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability

KEV · due 13 FebEPSS 22%public exploitSSVC actCVSS 9.8
critical.is priorityof 100
99
CVSS 9.8 (CNA)9.8 / 10 × 3029.4In CISA KEV+3030.0EPSS percentile 97.7.977 × 2019.5Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.

Affected

ProductAffectedFixed inSource
VMware vCenter Server8.0 – < 8.0 U2d8.0 U2dCNA
VMware vCenter Server8.0 – < 8.0 U1e8.0 U1eCNA
VMware vCenter Server7.0 – < 7.0 U3r7.0 U3rCNA
VMware Cloud Foundation5.x–CNA
VMware Cloud Foundation4.x–CNA

Scores by source

vmware (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refsupport.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-37079kevcisa.gov/known-exploited-vulnerabilities-catalog