Vulnerability in N/a VMware vCenter Server
CVSS Skor
9.8
EPSS İhtimal
%99.9
Risk Skoru
19.6
Yayın
5 yıl önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
VMware vCenter Server CVE-2021-21972 (RCE) — vulnerability analysis, detection, and mitigation
Looking at current high-impact vulnerabilities, let's use the VMware vCenter Server CVE-2021-21972 (CVSS 9.8) as our base. This is a publicly known RCE with patches available, perfect for demonstrating CTT enhancements.
CVE-2021-21972 – ᴠᴍᴡᴀʀᴇ ᴄʟɪᴇɴᴛ ᴜɴᴀᴜᴛʜᴏʀɪᴢᴇᴅ ᴄᴏᴅᴇ ɪɴᴊᴇᴄᴛɪᴏɴ (ʀᴄᴇ)
[CVE-2021-21972] VMware vSphere Client Unauthorized File Upload to Remote Code Execution (RCE)
A vulnerability scanner that detects CVE-2021-21972 vulnerabilities.
VMware vCenter Server 7.0 - Remote Code Execution (RCE) (Unauthenticated)
VMware vCenter Server 7.0 - Unauthenticated File Upload
Nuclei: VMware vSphere Client (HTML5) - Remote Code Execution
İlgili Benzer Açıklar
Improper access control in N/a
Vulnerability in N/a VMware vCenter Server And VMware Cloud Foundation
Vulnerability in N/a
Vulnerability in N/a
Path traversal in N/a
Code injection in N/a Ivanti EPM
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2021-21972"