Lucene search

[email protected]CVE-2021-22014

HistorySep 23, 2021 - 12:15 p.m.

CVE-2021-22014

2021-09-2312:15:08

[email protected]

web.nvd.nist.gov

cve-2021-22014

vcenter server

code execution

vami

vulnerability

nvd

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

9 High

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

43.0%

JSON

The vCenter Server contains an authenticated code execution vulnerability in VAMI (Virtual Appliance Management Infrastructure). An authenticated VAMI user with network access to port 5480 on vCenter Server may exploit this issue to execute code on the underlying operating system that hosts vCenter Server.

Affected configurations

NVD

Node

vmwarecloud_foundationRange3.0–5.0

vmwarevcenter_serverMatch6.5-

vmwarevcenter_serverMatch6.7-

vmwarevcenter_serverMatch7.0-

CPENameOperatorVersion
vmware:cloud_foundationvmware cloud foundationlt5.0
vmware:vcenter_servervmware vcenter servereq6.5
vmware:vcenter_servervmware vcenter servereq6.7
vmware:vcenter_servervmware vcenter servereq7.0

CPE	Name	Operator	Version
vmware:cloud_foundation	vmware cloud foundation	lt	5.0
vmware:vcenter_server	vmware vcenter server	eq	6.5
vmware:vcenter_server	vmware vcenter server	eq	6.7
vmware:vcenter_server	vmware vcenter server	eq	7.0

CNA Affected

[
  {
    "product": "VMware vCenter Server, VMware Cloud Foundation",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VMware vCenter Server(7.x before 7.0 U2c, 6.7 before 6.7 U3o and 6.5 before 6.5 U3q) and VMware Cloud Foundation (4.x before 4.3 and 3.x before 3.10.2.2)"
      }
    ]
  }
]