VMware Issues Patches for Cloud Foundation, vCenter Server, and vSphere ESXi

🗓️ 18 Jun 2024 08:24:00Reported by The Hacker NewsType

VMware releases critical patches for Cloud Foundation, vCenter Server, and vSphere ESXi addressing remote code execution and privilege escalation vulnerabilitie

Reporter	Title	Published	Views	Family All 78
GithubExploit	Exploit for ASP.NET Misconfiguration: Use of Identity Impersonation in Vmware Vcenter_Server	9 Jul 202416:14	–	githubexploit
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in VMware vCenter affect Cloud Pak System [CVE-2024-37079, CVE-2024-37080, CVE-2024-37081]	3 May 202523:46	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in VMware affect IBM Cloud Pak System [CVE-2023-34048, CVE-2023-34056]	10 Jan 202408:32	–	ibm
ATTACKERKB	CVE-2023-34048	25 Oct 202300:00	–	attackerkb
ATTACKERKB	CVE-2024-37079	18 Jun 202406:15	–	attackerkb
ATTACKERKB	CVE-2024-37080	18 Jun 202406:15	–	attackerkb
Information Security Automation	October 2023: back to Positive Technologies, Vulristics updates, Linux Patch Wednesday, Microsoft Patch Tuesday, PhysTech VM lecture	5 Nov 202318:39	–	avleonov
BDU FSTEC	The vulnerability of the DCERPC protocol implementation in the software for managing virtual infrastructure VMware vCenter Server allows a perpetrator to execute arbitrary code.	26 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the DCERPC protocol implementation in the software for managing virtual infrastructure VMware vCenter Server allows a perpetrator to execute arbitrary code.	18 Jun 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the DCERPC protocol implementation in the software for managing virtual infrastructure VMware vCenter Server allows a perpetrator to execute arbitrary code.	24 Jun 202400:00	–	bdu_fstec

18 Jun 2024 08:24Current

8.7High risk

Vulners AI Score8.7

CVSS 3.19.8

EPSS0.99428

SSVC