← back
CVE-2023-20895

CVE-2023-20895

CVSS 8.1 HIGHEPSS 1.4%
The VMware vCenter Server contains a memory corruption vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger a memory corruption vulnerability which may bypass authentication.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
VMware · VMware Cloud Foundation (vCenter Server)VMware · VMware vCenter Server (vCenter Server)

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1740https://www.vmware.com/security/advisories/VMSA-2023-0014.html