CVE-2021-22005

9.8CRITICAL

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code

게시됨: 9/23/2021업데이트됨: 10/30/2025
NVD에서 보기MITRE에서 보기

CISA 알려진 악용 취약점

VMware vCenter Server contains a file upload vulnerability in the Analytics service that allows a user with network access to port 443 to execute code.

필요한 조치:

Apply updates per vendor instructions.

마감일:

2021-11-17

알려진 랜섬웨어 사용

설명

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file.

AI 분석AI 기반

영향받는 제품

vmwarecloud_foundation
vmwarevcenter_server
6.5
vmwarevcenter_server
6.7
vmwarevcenter_server
7.0

참조