7.2Yüksek

CVE-2024-22274

VMware vCenter Server; VMware Cloud Foundation (vCenter Server); broadcom vmware_center_server Yayım: (2 yıl önce)

Açıklama

The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the underlying operating system.

Zayıflık türü (CWE): CWE-94

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
broadcom vmware_center_server 8.0
— VMware Cloud Foundation (vCenter Server) 5.x – < 5.1.1, 4.x
— VMware vCenter Server 8.0 – < 8.0 U2b, 7.0 – < 7.0 U3q
vmware cloud foundation 4.0 – < 5.1.1
vmware vcenter server 7.0

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (43)

  • cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:* ≥ 4.0 < 5.1.1
  • cpe:2.3:a:vmware:vcenter_server:7.0:-:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:a:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:b:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:c:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:d:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:update1:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:update1a:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:update1c:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:update1d:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:update2:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:update2a:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:update2b:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:update2c:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:update2d:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:update3:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:update3a:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:update3c:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:update3d:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:update3e:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:update3f:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:update3g:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:update3h:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:update3i:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:update3j:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:update3k:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:update3l:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:update3m:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:update3n:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:update3o:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:7.0:update3p:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:-:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:a:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:b:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:c:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update1:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update1a:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update1b:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update1c:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update1d:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update1e:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update2:*:*:*:*:*:*
  • cpe:2.3:a:vmware:vcenter_server:8.0:update2a:*:*:*:*:*:*