Vmware vCenter Flaws Leading to RCE Attacks

🗓️ 27 Oct 2023 13:16:58Reported by HiveForce LabsType

hivepro🔗 www.hivepro.com👁 66 Views

VMware vCenter Server RCE Flaws: CVE-2023-34048, CVE-2023-34056

Reporter	Title	Published	Views	Family All 46
IBM Security Bulletins	Security Bulletin: Vulnerabilities in VMware affect IBM Cloud Pak System [CVE-2023-34048, CVE-2023-34056]	10 Jan 202408:32	–	ibm
ATTACKERKB	CVE-2023-34048	25 Oct 202300:00	–	attackerkb
ATTACKERKB	CVE-2023-34056	25 Oct 202300:00	–	attackerkb
Information Security Automation	October 2023: back to Positive Technologies, Vulristics updates, Linux Patch Wednesday, Microsoft Patch Tuesday, PhysTech VM lecture	5 Nov 202318:39	–	avleonov
BDU FSTEC	The vulnerability of the DCERPC protocol implementation in the software for managing virtual infrastructure VMware vCenter Server allows a perpetrator to execute arbitrary code.	26 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of VMware vCenter Server’s software for managing virtual infrastructure lies in the lack of protection for operational data, allowing attackers to gain unauthorized access to protected information.	26 Oct 202300:00	–	bdu_fstec
Circl	CVE-2023-34048	25 Oct 202312:24	–	circl
Circl	CVE-2023-34056	26 Oct 202312:34	–	circl
CISA KEV Catalog	VMware vCenter Server Out-of-Bounds Write Vulnerability	22 Jan 202400:00	–	cisa_kev
CISA	VMware Releases Security Advisory for vCenter Server	26 Oct 202312:00	–	cisa

27 Oct 2023 13:16Current

7.8High risk

Vulners AI Score7.8

EPSS0.99428

vmware rce flaws cve-2023-34048 cve-2023-34056 remote code execution information disclosure