CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
VMware vCenter Server DCERPC Protocol Out-of-Bounds Write Vulnerability (CVE-2023-34048) Security Advisory
[Affected Scope] VMware vCenter Server 7.0 and 8.0 series, VMware Cloud Foundation 4.x and 5.x series
[Impact] An unauthenticated attacker with network access can trigger an out-of-bounds write, potentially leading to remote code execution (RCE) with administrative privileges
[Mitigation] Apply the official security patches immediately, and restrict network access to the vCenter DCERPC port (default 2012/tcp) using firewalls
VMware vCenter Server Information Disclosure Vulnerability due to Improper File Permissions (CVE-2022-22948) Analysis and Mitigation Guide
[Affected Scope] Unpatched VMware vCenter Server versions 6.5, 6.7, and 7.0
[Impact] A malicious actor with non-administrative or local access can read sensitive configuration files and credentials, potentially leading to full infrastructure compromise
[Mitigation] Apply official VMware security patches (VMSA-2022-0009) immediately, or restrict file permissions on sensitive configuration files as a temporary workaround