Description (CNA)
The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / VMware vCenter Server | affected 8.0 before 8.0 U3b; affected 7.0 before 7.0 U3s |
| n/a / VMware Cloud Foundation | affected 5.x; affected 4.x |
CWE
CWE-122
References
ADP enrichment
No English description supplied.