CVE-2024-37080
Vmware
CVE-2024-37080 is a critical heap-overflow vulnerability found in VMware vCenter Server's DCERPC protocol implementation. This vulnerability allows a remote attacker with network access to potentially execute arbitrary code by sending a crafted network packet to the vCenter Server. With a SOCRadar Vulnerability Risk Score (SVRS) of 84, CVE-2024-37080 requires immediate attention and remediation. The high SVRS, combined with its designation as "In The Wild", indicates active exploitation and a heightened risk profile. Successful exploitation could lead to complete system compromise, data breaches, and significant disruption of services. Given the critical nature of vCenter Server in managing virtual infrastructure, patching this vulnerability is crucial to maintain the security and integrity of the environment. The associated CWE-787 further clarifies that the vulnerability is related to out-of-bounds write.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.