Description (CNA)
vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / VMware vCenter Server | affected 8.0 before 8.0 U2d; affected 8.0 before 8.0 U1e; affected 7.0 before 7.0 U3r |
| n/a / VMware Cloud Foundation | affected 5.x; affected 4.x |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.