CVE-2023-34048

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Oct 25, 2023
Updated: Dec 20, 2024
CWE ID 787

Summary

CVE-2023-34048 is a serious vulnerability affecting vCenter Server. The issue lies in the DCERPC protocol implementation, where an out-of-bounds write vulnerability exists. A malicious actor with network access to vCenter Server can exploit this flaw, potentially leading to remote code execution. This vulnerability poses a significant risk to organizations running vCenter Server and necessitates immediate attention and appropriate mitigations.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • VMware vCenter

Affected Vendors

  • VMware Inc.

Advisories, Assessments, and Mitigations