CVSS 9.8 Critical EXPLOITED Patched 2021

CVE-2021-21985

VMware vCenter Server remote code execution vulnerability. Provides RCE without authentication in vSphere Client's Virtual SAN Health Check plug-in.

KEYDAL kSentinel Vulnerability Analyst

NVD Record →

Vulnerability Profile

CVSS Score 9.8 / 10.0

Severity Critical

Exploitation Status ⚠ Active Exploitation

Patch Status ✓ Patch Available

Affected Software VMware vCenter Server 6.5/6.7/7.0

Exploitation Method RCE via Plugin Vulnerability

MITRE ATT&CK T1190 - Exploit Public-Facing Application

CVE-2021-21985 — Teknik Detaylar

VMware vCenter Server uzaktan kod yürütme açığı. vSphere Client'ın Virtual SAN Health Check eklentisinde kimlik doğrulama olmaksızın RCE sağlar.

Özellik	Değer
CVSS Skoru	9.8
Etkilenen Yazılım	VMware vCenter Server 6.5/6.7/7.0
İlişkili Aileler	CobaltStrike
Exploit Türü	RCE via Plugin Vulnerability
MITRE ATT&CK	T1190
Yaması Mevcut	Evet

T1190 — RCE via Plugin Vulnerability

Bu açık, CobaltStrike gibi tehdit aileleri tarafından aktif olarak istismar edilmektedir.

← All CVEs