CISA Known Exploited Vulnerability (KEV)
VMware vCenter Server Privilege Escalation Vulnerability
November 20, 2024
December 11, 2024
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Description
The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet.