CVE-2021-22014

HIGH

7.2

Description

The vCenter Server contains an authenticated code execution vulnerability in VAMI (Virtual Appliance Management Infrastructure). An authenticated VAMI user with network access to port 5480 on vCenter Server may exploit this issue to execute code on the underlying operating system that hosts vCenter Server.

CVE Details

CVSS v3.1 Score7.2

SeverityHIGH

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredHIGH

User InteractionNONE

Published9/23/2021

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

vmware:cloud_foundationvmware:vcenter_server

References

https://www.vmware.com/security/advisories/VMSA-2021-0020.html(security@vmware.com)

https://www.vmware.com/security/advisories/VMSA-2021-0020.html(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.