by Kastro
Paper/Archive/CVE-2024-38813

CVE-2024-38813

broadcom vmware_center_server — Privilege escalation vulnerability

KEV · due 11 DecEPSS 17%public exploitSSVC actCVSS 9.8
critical.is priorityof 100
99
CVSS 9.8 (NVD)9.8 / 10 × 3029.4In CISA KEV+3030.0EPSS percentile 97.1.971 × 2019.4Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet.

Affected

ProductAffectedFixed inSource
VMware vCenter Server8.0 – < 8.0 U3b8.0 U3bCNA
VMware vCenter Server7.0 – < 7.0 U3s7.0 U3sCNA
VMware Cloud Foundation5.x–CNA
VMware Cloud Foundation4.x–CNA
vmware_center_server8.0 – < 8.0_u3b8.0_u3bCISA-ADP
vmware_center_server7.0 – < 7.0_u3s7.0_u3sCISA-ADP
vmware_center_server8.0 – < 8.0_u3b8.0_u3bCISA-ADP
vmware_center_server7.0 – < 7.0_u3s7.0_u3sCISA-ADP
vmware_cloud_foundation5.0 – < 6.06.0CISA-ADP
vmware_cloud_foundation4.0 – < 5.05.0CISA-ADP
vmware_cloud_foundation5.0 – < 6.06.0CISA-ADP
vmware_cloud_foundation4.0 – < 5.05.0CISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vmware (CNA)7.5CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: no · Technical impact: total

References

refsupport.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38813kevcisa.gov/known-exploited-vulnerabilities-catalog