CVE-2024-37079criticalunder attackCWE-787

CVE-2024-37079: critical vulnerability in VMware Cloud Foundation

Published · Updated

Follow this CVE+ Monitor VMware Cloud Foundation+ Monitor vCenter Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

63Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 9.8epss 22%
from disclosure to weapon
Published on NVDJun 18
CISA KEV+584d
Action required by CISAfederal deadline: 2026-02-13

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

vCenter Server has a memory overflow bug in its DCERPC protocol handler. An attacker on the network can send a specially crafted packet to execute malicious code on the server without needing credentials.

Technical detail

Heap-overflow vulnerability in DCERPC protocol implementation allows unauthenticated remote code execution. Attack vector is network-based requiring only network connectivity; no prior authentication or user interaction needed. Successful exploitation grants complete server compromise with CRITICAL impact.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · VMware Cloud Foundationn/a · VMware vCenter Server