CyberSec.Space Logo
Back to CVE Browser

CVE-2021-21985

Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score95.8860%
EPSS Percentile95.73th
PublishedMay 26, 2021
Last ModifiedOct 30, 2025

Vulnerability Description

The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server.

Affected Platforms (CPE)

📦
Vmware

Vcenter Server

= 6.5
📦
Vmware

Vcenter Server

= 6.5
📦
Vmware

Vcenter Server

= 6.5
📦
Vmware

Vcenter Server

= 6.5
📦
Vmware

Vcenter Server

= 6.5
📦
Vmware

Vcenter Server

= 6.5
📦
Vmware

Vcenter Server

= 6.5
📦
Vmware

Vcenter Server

= 6.5
📦
Vmware

Vcenter Server

= 6.5
📦
Vmware

Vcenter Server

= 6.5
📦
Vmware

Vcenter Server

= 6.5
📦
Vmware

Vcenter Server

= 6.5
📦
Vmware

Vcenter Server

= 6.5
📦
Vmware

Vcenter Server

= 6.5
📦
Vmware

Vcenter Server

= 6.5
📦
Vmware

Vcenter Server

= 6.5
📦
Vmware

Vcenter Server

= 6.5
📦
Vmware

Vcenter Server

= 6.5
📦
Vmware

Vcenter Server

= 6.5
📦
Vmware

Vcenter Server

= 6.5
📦
Vmware

Vcenter Server

= 6.5
📦
Vmware

Vcenter Server

= 6.5
📦
Vmware

Vcenter Server

= 6.5
📦
Vmware

Vcenter Server

= 6.7
📦
Vmware

Vcenter Server

= 6.7
📦
Vmware

Vcenter Server

= 6.7
📦
Vmware

Vcenter Server

= 6.7
📦
Vmware

Vcenter Server

= 6.7
📦
Vmware

Vcenter Server

= 6.7
📦
Vmware

Vcenter Server

= 6.7
📦
Vmware

Vcenter Server

= 6.7
📦
Vmware

Vcenter Server

= 6.7
📦
Vmware

Vcenter Server

= 6.7
📦
Vmware

Vcenter Server

= 6.7
📦
Vmware

Vcenter Server

= 6.7
📦
Vmware

Vcenter Server

= 6.7
📦
Vmware

Vcenter Server

= 6.7
📦
Vmware

Vcenter Server

= 6.7
📦
Vmware

Vcenter Server

= 6.7
📦
Vmware

Vcenter Server

= 6.7
📦
Vmware

Vcenter Server

= 7.0
📦
Vmware

Vcenter Server

= 7.0
📦
Vmware

Vcenter Server

= 7.0
📦
Vmware

Vcenter Server

= 7.0
📦
Vmware

Vcenter Server

= 7.0
📦
Vmware

Vcenter Server

= 7.0
📦
Vmware

Vcenter Server

= 7.0
📦
Vmware

Vcenter Server

= 7.0
📦
Vmware

Vcenter Server

= 7.0
📦
Vmware

Vcenter Server

= 7.0
📦
Vmware

Vcenter Server

= 7.0
📦
Vmware

Cloud Foundation

>= 3.0 and < 3.10.2.1
📦
Vmware

Cloud Foundation

>= 4.0 and < 4.2.1

References & Advisories

🔗 http://packetstormsecurity.com/files/162812/VMware-Security-Advisory-2021-0010.html
🔗 http://packetstormsecurity.com/files/163487/VMware-vCenter-Server-Virtual-SAN-Health-Check-Remote-Code-Execution.html
🔗 https://www.vmware.com/security/advisories/VMSA-2021-0010.html
🔗 http://packetstormsecurity.com/files/162812/VMware-Security-Advisory-2021-0010.html
🔗 http://packetstormsecurity.com/files/163487/VMware-vCenter-Server-Virtual-SAN-Health-Check-Remote-Code-Execution.html
🔗 https://www.vmware.com/security/advisories/VMSA-2021-0010.html
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-21985

Related Vulnerabilities

CVE-2015-234210.0

The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict re...

CVE-2013-140510.0

VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0 before Up...

CVE-2021-219729.8

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with netwo...

CVE-2020-39529.8

Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Contro...