Article Details
Scrape Timestamp (UTC): 2024-10-22 07:05:55.288
Source: https://thehackernews.com/2024/10/vmware-releases-vcenter-server-update.html
Original Article Text
Click to Toggle View
VMware Releases vCenter Server Update to Fix Critical RCE Vulnerability. VMware has released software updates to address an already patched security flaw in vCenter Server that could pave the way for remote code execution. The vulnerability, tracked as CVE-2024-38812 (CVSS score: 9.8), concerns a case of heap-overflow vulnerability in the implementation of the DCE/RPC protocol. "A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution," Broadcom-owned virtualization services provider said. The flaw was originally reported by zbl and srs of team TZL at the Matrix Cup cybersecurity competition held in China earlier this year. "VMware by Broadcom has determined that the vCenter patches released on September 17, 2024 did not fully address CVE-2024-38812," the company noted. Patches for the flaw are available in the below vCenter Server versions - It's also available as an asynchronous patch for VMware Cloud Foundation versions 5.x, 5.1.x, and 4.x. There are no known mitigations. While there is no evidence that the vulnerability has been ever exploited in the wild, users are advised to update to the latest versions to safeguard against potential threats. In July 2021, China passed a law that requires vulnerabilities discovered by researchers in the country to be promptly disclosed to the government and the product's manufacturer, raising concerns that it could help nation-state adversaries stockpile zero-days and weaponize them to their advantage.
Daily Brief Summary
VMware released updates to fix a critical remote code execution vulnerability in vCenter Server.
The issue, CVE-2024-38812 scoring 9.8 on the CVSS scale, involved a heap-overflow in the DCE/RPC protocol.
A specially crafted network packet could exploit this vulnerability by any malicious actor with network access.
The flaw was initially reported by researchers at a cybersecurity contest in China and was not fully patched in previous updates.
Updated patches are now available for multiple versions of vCenter Server and VMware Cloud Foundation.
There is no current evidence of exploitation in the wild; however, users are urged to update their systems promptly.
Regulatory changes in China from 2021 require vulnerabilities discovered locally to be reported both to the government and the manufacturer, potentially influencing global cybersecurity dynamics.