VULNERABILITY INTELLIGENCE

CVE-2024-38813

CVSS score7.5 HIGH
EPSS probability17.36%
CISA KEVKnown exploited vulnerability
Published2024-09-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

VMware vCenter Server Privilege Escalation Vulnerability

Vendor / product: VMware / vCenter Server

Description

The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet.

Weakness classification

  • security@vmware.com: CWE-250
  • nvd@nist.gov: CWE-273

Primary references