CVE-2025-41241 — Denial-of-service vulnerability

CVE-2025-41241

Denial-of-service vulnerability PUBLISHED

Description (CNA)

VMware vCenter contains a denial-of-service vulnerability. A malicious actor who is authenticated through vCenter and has permission to perform API calls for guest OS customisation may trigger this vulnerability to create a denial-of-service condition.

Affected (CNA)

Vendor / product	Versions
VMware / vCenter	affected 8.0 before 8.0 U3g; affected 7.0 before 7.0 U3v
VMware / Cloud Foundation	affected 5.x, 4.5.x
VMware / Telco Cloud Platform	affected 5.x, 2.x
VMware / Telco Cloud Infrastructure	affected 2.x

CWE

CWE-754

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35964

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.