CVE-2023-34048: critical vulnerability in VMware vCenter Server
VMware vCenter Server Out-of-Bounds Write Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Patch now. It under exploitation confirmed by CISA, has a working public exploit and 1 threat group(s) use it.
Groups known to exploit this vulnerability (MITRE ATT&CK attribution).
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
VMware vCenter Server has a flaw in how it handles network communications that allows attackers to write data beyond intended memory boundaries, potentially giving them complete control of the system. This is critical because vCenter Server manages virtual infrastructure in data centers.
An out-of-bounds write vulnerability exists in the DCERPC protocol implementation of vCenter Server (CWE-787). A network-adjacent attacker can craft malicious DCERPC packets to trigger memory corruption, potentially achieving unauthenticated remote code execution with the privileges of the vCenter Server process.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.