CVE-2021-21978: vulnerability in VMware View Planner
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
82Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 99%
from disclosure to weapon2 days
Published on NVDMar 3
1st PoC+2d
metasploitMar 2
VulnCheck+1005d
VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability. Improper input validation and lack of authorization leading to arbitrary file upload in logupload web application. An unauthorized attacker with network access to View Planner Harness could upload and execute a specially crafted file leading to remote code execution within the logupload container.
Affected products
n/a · VMware View Plannerpublic PoCs found — 4
vulncheckvulncheck.com/xdb/1face3f78b15unverifiedvulncheckvulncheck.com/xdb/d980ef64d575unverifiedvulncheckvulncheck.com/xdb/8551d028e2bcunverifiedvulncheckvulncheck.com/xdb/97f6deb588bbunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.