CVE-2024-22274

published 2024-05-21

CVE-2024-22274: The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance…

Priority P3 51 high 7.2 CVSS 3.1

AV N AC L PR H UI N S U C H I H A H

The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the underlying operating system.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
vmware	cloud_foundation	>= 4.0 < 5.1.1	5.1.1
vmware	vcenter_server	—	—
vmware	vcenter_server	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-94