Actively exploited · Published Oct 25, 2023 · Assigned by vmware
CVE-2023-34048VMware vCenter Server Out-of-Bounds Write Vulnerability
Critical 9.8 Exploited
In plain English
A critical-severity out-of-bounds write in VMware Cloud Foundation (VMware vCenter Server) from VMware. Attackers are actively exploiting it in the wild (listed by CISA on January 22, 2024). The chance it is exploited in the next 30 days is estimated at 99.2% (higher than 99.9% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA guidance
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Federal agencies must remediate by Feb 12, 2024.
Official description
vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds write potentially leading to remote code execution.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| VMware | VMware vCenter Server | 8.0 – before 8.0U27.0 – before 7.0U3o |
| VMware | VMware Cloud Foundation (VMware vCenter Server) | 5.x4.x |
Weakness: CWE-787 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H