DE · EN
Call us
+41 44 508 80 00 Ueberlandstrasse 1, 8600 Dübendorf
build 980262fe | content blog-content@c8490fa · 338 posts | profiles 20 · corpus 208 | ● 0 skipped |
Post · 2024-09-18

VMware Security Advisory

Broadcom has disclosed a new vulnerability, covered by VMware Security Advisory 2024-0019. The issues are rated 7.5 to 9.8 on the CVSS scale.

2024-09-18Date
Daniel StadelmannAuthor
1Min read
133words
no translation reviewed
Topics capabilities · idf weight Security security 2.23
Vendors vendors · idf weight VMware vmware 0.91

Broadcom has disclosed a new vulnerability. It is covered by VMware Security Advisory 2024-0019 and the issues are rated 7.5 to 9.8 on the CVSS scale. The most severe one (CVSS 9.8) should be closed with the available update as soon as possible.

VMSA-2024-0019

The published vulnerability (CVE-2024-38812) lets an attacker with network access to the vCenter appliance perform remote code execution. The second one (CVE-2024-38813) lets an attacker with network access to the vCenter appliance obtain root rights through privilege escalation. Only vCenter is affected. Further detail and the fixed version are at Broadcom.

Broadcom reports no known attacks so far. With the vulnerabilities now published that can change within hours. Both soulTec and Broadcom recommend patching the affected systems immediately. If you need a hand, we are glad to help.

You might also like

post 1.00

VMware Security Advisory

0.7 × caps 1 + 0.3 × vendor 1 = 1
post 1.00

VMware Security Advisory

0.7 × caps 1 + 0.3 × vendor 1 = 1
solution 0.56

Carbon Black

0.7 × caps 0.37 + 0.3 × vendor 1 = 0.56