CVE-2024-38812
🔥 Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
Vulnerability Description
The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
Affected Platforms (CPE)
📦
Vmware
Cloud Foundation
>= 4.0 and < 5.2
📦
Vmware
Vcenter Server
= 7.0= 8.0