CVE-2023-34048

No fix known ExploitedEPSS 99%CVSS 9.8

vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds write potentially leading to remote code execution.

Published 2023-10-25 · In CISA KEV since 2024-01-22 · CVE record · OSV

Products: VMware vCenter Server, VMware Cloud Foundation (VMware vCenter Server), VMware vCenter Server, vmware cloud_foundation