Evil-DB LogoEvil-DB
← All CVEs

CVE-2021-21972

critical · 9.8Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply updates per vendor instructions.

Added 2021-11-03Remediation due 2021-11-17

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server. This affects VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2).

9.8
CVSS
99.9%
EPSS (exploit prob.)
100th
EPSS percentile
2021-02-24
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-22

Affected products

VendorProductAffected versions
vmwarecloud_foundation>= 3.0, < 3.10.1.2
vmwarecloud_foundation>= 4.0, < 4.2
vmwarevcenter_server6.5
vmwarevcenter_server6.5
vmwarevcenter_server6.5
vmwarevcenter_server6.5
vmwarevcenter_server6.5
vmwarevcenter_server6.5
vmwarevcenter_server6.5
vmwarevcenter_server6.5
vmwarevcenter_server6.5
vmwarevcenter_server6.5
vmwarevcenter_server6.5
vmwarevcenter_server6.5
vmwarevcenter_server6.5
vmwarevcenter_server6.5
vmwarevcenter_server6.5
vmwarevcenter_server6.5
vmwarevcenter_server6.5
vmwarevcenter_server6.5
vmwarevcenter_server6.5
vmwarevcenter_server6.7
vmwarevcenter_server6.7
vmwarevcenter_server6.7
vmwarevcenter_server6.7
vmwarevcenter_server6.7
vmwarevcenter_server6.7
vmwarevcenter_server6.7
vmwarevcenter_server6.7
vmwarevcenter_server6.7
vmwarevcenter_server6.7
vmwarevcenter_server6.7
vmwarevcenter_server6.7
vmwarevcenter_server6.7
vmwarevcenter_server6.7
vmwarevcenter_server6.7
vmwarevcenter_server7.0
vmwarevcenter_server7.0
vmwarevcenter_server7.0
vmwarevcenter_server7.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2021-21972