CVE-2024-38814

CVSS 8.8 HIGHEPSS 14.6%CWE-89

Vexday Risk Score

26Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 8.8EPSS 14.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

16 out 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

An authenticated SQL injection vulnerability in VMware HCX was privately reported to VMware. A malicious authenticated user with non-administrator privileges may be able to enter specially crafted SQL queries and perform unauthorized remote code execution on the HCX manager. Updates are available to remediate this vulnerability in affected VMware products.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Produtos afetados

N/A · VMware HCX

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25019