VMware vCenter Alert: Unauthenticated Remote Code Execution (RCE) in VMware vCenter
This is a critical vulnerability exposing VMware vCenter servers to unauthenticated remote code execution (RCE). Attackers can gain full control of affected servers without needing any credentials, posing an immediate and severe risk to network infrastructure.
Imagine a building with a special "master control panel" (vCenter) that manages all the lights, security cameras, and doors. This vulnerability is like finding a hidden, unlocked back door directly into that control room, with no guard (no authentication) and no security cameras working (no logging of the entry). Anyone who finds this door can walk in and control the entire building's systems without ever being challenged.
La Cybersecurity and Infrastructure Security Agency (CISA) ha aggiunto la vulnerabilità critica CVE-2024-37079 di VMware vCenter Server al suo catalogo delle vulnerabilità sfruttate (KEV). La falla, che ha un punteggio CVSS critico di 9,8, è stata attribuita a Hao Zheng e Zibo Li di QiAnXin LegendSec e permette l’esecuzione di codice remoto senza autenticazione. CISA ha imposto alle agenzie federali di risolvere la vulnerabilità entro il 13 febbraio 2026.
0 Comments