Description
VMware ESXi 是 VMware 公司推出的企业级虚拟化平台，广泛部署于数据中心，承担服务器虚拟化与虚拟机资源管理，是业界主流的裸机级 hypervisor 之一。该平台 /sdk 接口存在默认口令漏洞，由于 root 账户为空密码，攻击者可通过空密码直接以管理员身份登录管理接口，进而完全接管 ESXi 主机及所有虚拟机，威胁核心业务安全与数据完整性。
VMware ESXi /sdk 默认口令漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://tessl.io/registry/skills/github/elementalsouls/Claude-BugHunter/vmware-vcenter-attack
https://www.tenable.com/plugins/nessus/76993
https://github.com/UGF0aWVudF9aZXJv/VMWare-Pentesting
https://www.vmware.com/docs/default-accounts-in-vmware-vsphere
https://community.broadcom.com/vmware-cloud-foundation/communities/community-home/digestviewer/viewthread?GroupId=4741&MessageKey=9f3079e7-3530-4ae0-b48b-fae43e36b911&CommunityKey=185ca20b-b56d-41b3-a4b8-aad095f0d970
https://cn-sec.com/archives/3168789.html
https://techdocs.broadcom.com/tw/zh-tw/vmware-cis/vsphere/vsphere/8-0/vsphere-security/securing-esxi-hosts/general-security-recommendations/esxi-passwords-and-lockout.html
https://support.hpe.com/hpesc/public/docDisplay?docId=a00112754en_us&page=s_config-os-setting.html
https://community.hpe.com/t5/operating-system-vmware/default-password-for-custom-hpe-esxi-image-8/td-p/7194880