Vmware Cloud Foundation (Vcenter Server) vulnerabilities
5 vulnerabilities
Known vulnerabilities in Vmware Cloud Foundation (Vcenter Server), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2023-20894vmwarevcenter_server+2
EPSS score33.95%
The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bound write by sending a specially crafted packet leading to memory corruption.CVE-2023-20895vmwarevcenter_server+2EPSS score1.38%
The VMware vCenter Server contains a memory corruption vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger a memory corruption vulnerability which may bypass authentication.CVE-2023-20892vmwarevcenter_server+2EPSS score1.85%
The vCenter Server contains a heap overflow vulnerability due to the usage of uninitialized memory in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may exploit heap-overflow vulnerability to execute arbitrary code on the underlying operating system that hosts vCenter Server.CVE-2023-20896vmwarevcenter_server+2EPSS score0.90%
The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds read by sending a specially crafted packet leading to denial-of-service of certain services (vmcad, vmdird, and vmafdd).CVE-2023-20893vmwarevcenter_server+2EPSS score1.25%
The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may exploit this issue to execute arbitrary code on the underlying operating system that hosts vCenter Server.