VMware Issues Patches for Cloud Foundation, vCenter Server, and vSphere ESXi

VMware has produced updates to address critical flaws impacting Cloud Foundation, vCenter Server, and vSphere ESXi that could be exploited to accomplish privilege escalation and distant code execution.

The checklist of vulnerabilities is as follows –

• CVE-2024-37079 & CVE-2024-37080 (CVSS scores: 9.8) – Many heap-overflow vulnerabilities in the implementation of the DCE/RPC protocol that could let a negative actor with network entry to vCenter Server to achieve distant code execution by sending a specially crafted network packet

• CVE-2024-37081 (CVSS rating: 7.8) – Multiple community privilege escalation vulnerabilities in VMware vCenter arising because of to the misconfiguration of sudo that an authenticated nearby consumer with non-administrative privileges could exploit to receive root permissions

This is not the initial time VMware has resolved shortcomings in the implementation of the DCE/RPC protocol. In October 2023, the Broadcom-owned virtualization products and services service provider patched a further critical security hole (CVE-2023-34048, CVSS score: 9.8) that could also be abused to execute arbitrary code remotely.

Chinese cybersecurity enterprise QiAnXin LegendSec researchers Hao Zheng and Zibo Li have been credited with getting and reporting CVE-2024-37079 and CVE-2024-37080. The discovery of CVE-2024-37081 has been credited to Matei “Mal” Badanoiu at Deloitte Romania.

All a few issues, which affect vCenter Server versions 7. and 8., have been dealt with in variations 7. U3r, 8. U1e, and 8. U2d.

When there are no regarded studies of any of the vulnerabilities becoming actively exploited in the wild, it’s necessary that buyers go rapidly to utilize the patches in gentle of their criticality.

Uncovered this post intriguing? Stick to us on Twitter  and LinkedIn to go through much more exclusive content material we publish.

Some areas of this write-up are sourced from:
thehackernews.com