H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2021-11-03
Last seen2021-11-03

Confidence

—

VMware vCenter Server vSphere Client contains a remote code execution vulnerability in a vCenter Server plugin which allows an attacker with network access to port 443 to execute commands with unrestricted privileges on the underlying operating system.

Labels

exploitedkevransomware

CISA KEV context

Vendor / productVMware vCenter Server
Added2021-11-03
Due date2021-11-17
3 recorded

Relationships

mitigatesMitigation
related-toTechnique
2 external

References

nvd
CVE-2021-21972
open
cwe
CWE-23
open