VULNERABILITY INTELLIGENCE

CVE-2024-38812

CVSS score9.8 CRITICAL
EPSS probability54.57%
CISA KEVKnown exploited vulnerability
Published2024-09-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

Vendor / product: VMware / vCenter Server

Description

The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.

Weakness classification

  • security@vmware.com: CWE-122
  • nvd@nist.gov: CWE-787

Primary references