VMware多个高危漏洞通告

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.anquanke.com/post/id/232313
• https://it.ruc.edu.cn/wlaq/71aa52cd84e44debbe0de181f3a0f618.htm
• https://www.govcert.gov.hk/tc/alerts_detail.php?id=1491
• https://www.secrss.com/articles/76327
• https://www.cup.edu.cn/nic/docs/2025-05/1667d7c7bfa04cfa8b0fe98c1ce6b29e.pdf
• https://zhuanlan.zhihu.com/p/639718429
• https://www.h3c.com/cn/d_202112/1519573_30003_0.htm
• https://www.cert.org.cn/publish/main/9/2021/20210225143753552202994/20210225143753552202994_.html
• https://rivers.chaitin.cn/blog/cq94v3p0lnechd244cig
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390
• https://www.broadcom.com/support/vmware-security-advisories
• https://blogs.vmware.com/security/
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35877
• https://thehackernews.com/2025/03/vmware-security-flaws-exploited-in.html

Related Vulnerabilities

• VMware ESXi /sdk 默认口令漏洞
• PoCCVE-2022-31678: VMWare Cloud Foundation NSX-V - XML External Entity (XXE)
• PoCCVE-2018-6961: VMware NSX SD-WAN Edge - Command Injection
• (CVE-2025-41252) VMware NSX未认证的用户名枚举漏洞
• (CVE-2025-41246) VMware Tools for Windows授权不当漏洞
• （CVE-2025-41250）VMware vCenter SMTP头部注入漏洞
• Vmware Spring Security 逻辑缺陷漏洞
• Vmware Spring Framework 逻辑缺陷漏洞
• CVE-2023-20888: VMware Aria Operations for Networks - Remote Code Execution
• PoCCVE-2021-21972: VMware vSphere Client (HTML5) - Remote Code Execution
• PoCCVE-2021-21973: VMware vSphere - Server-Side Request Forgery
• PoCCVE-2021-21978: VMware View Planner <4.6 SP1- Remote Code Execution
• PoCCVE-2021-21985: VMware vSphere Client (HTML5) - Remote Code Execution