VMware Issues Patches for Cloud Foundation, vCenter Server, and vSphere ESXi

VMware has introduced updates to address critical flaws impacting Cloud Basis, vCenter Server, and vSphere ESXi that could be exploited to accomplish privilege escalation and remote code execution.

The record of vulnerabilities is as follows –

• CVE-2024-37079 & CVE-2024-37080 (CVSS scores: 9.8) – Numerous heap-overflow vulnerabilities in the implementation of the DCE/RPC protocol that could allow for a negative actor with network obtain to vCenter Server to reach distant code execution by sending a specifically crafted network packet

• CVE-2024-37081 (CVSS rating: 7.8) – Various neighborhood privilege escalation vulnerabilities in VMware vCenter arising due to the misconfiguration of sudo that an authenticated community user with non-administrative privileges could exploit to get hold of root permissions

This is not the to start with time VMware has dealt with shortcomings in the implementation of the DCE/RPC protocol. In Oct 2023, the Broadcom-owned virtualization services service provider patched one more critical security gap (CVE-2023-34048, CVSS rating: 9.8) that could also be abused to execute arbitrary code remotely.

Chinese cybersecurity enterprise QiAnXin LegendSec scientists Hao Zheng and Zibo Li have been credited with identifying and reporting CVE-2024-37079 and CVE-2024-37080. The discovery of CVE-2024-37081 has been credited to Matei “Mal” Badanoiu at Deloitte Romania.

All three issues, which have an effect on vCenter Server variations 7. and 8., have been resolved in variations 7. U3r, 8. U1e, and 8. U2d.

While there are no recognised reports of any of the vulnerabilities remaining actively exploited in the wild, it can be important that consumers go swiftly to use the patches in mild of their criticality.

Found this short article attention-grabbing? Adhere to us on Twitter  and LinkedIn to study a lot more exclusive content we submit.

Some parts of this article are sourced from:
thehackernews.com