漏洞描述 VMware vCenter Server DCE/RPC 协议实现中存在堆溢出漏洞,对vCenter Server具有网络访问权限的恶意行为者可能会通过发送特制的网络数据包来触发这些漏洞,成功的利用此漏洞可导致远程代码执行。
相关漏洞推荐 POC CVE-2021-22005: VMware vCenter Server - Arbitrary File Upload POC CVE-2021-22005: VMware vCenter Server - Arbitrary File Upload POC CVE-2020-3952: VMware vCenter Server LDAP Broken Access Control POC CVE-2023-34048: VMware vCenter Server - Out-of-Bounds Write VMware vCenter Server /ui/vcav-bootstrap/rest/vcav-providers/provider-logo 文件读取漏洞(CVE-2021-21986) VMware VCenter Server 缓冲区溢出漏洞 VMware vCenter Server rhttpproxy 认证绕过漏洞(CVE-2021-22017) VMware vCenter Server CVE-2021-21985 远程代码执行漏洞 VMware vCenter Server DCERPC 身份验证指针偏移越界漏洞 VMware vCenter Server 存在 Log4j 远程命令执行漏洞 VMware vCenter Server DCERPC Authentication Pointer 指针偏移越界漏洞 VMware vCenter Server Directory Service 认证绕过漏洞 VMware vCenter Server CVE-2021-21985 远程代码执行漏洞