CVE-2021-21972Used in ransomware
VMware vCenter Server
VMware vCenter Server Remote Code Execution Vulnerability
What it is
VMware vCenter Server vSphere Client contains a remote code execution vulnerability in a vCenter Server plugin which allows an attacker with network access to port 443 to execute commands with unrestricted privileges on the underlying operating system.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other VMware entries on the list
- ESXi, Workstation, and Fusion VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability CVE-2025-22226 · Mar 4, 2025
- ESXi VMware ESXi Arbitrary Write Vulnerability CVE-2025-22225 · Mar 4, 2025
- ESXi and Workstation VMware ESXi and Workstation TOCTOU Race Condition Vulnerability CVE-2025-22224 · Mar 4, 2025
- vCenter Server VMware vCenter Server Privilege Escalation Vulnerability CVE-2024-38813 · Nov 20, 2024
- vCenter Server VMware vCenter Server Heap-Based Buffer Overflow Vulnerability CVE-2024-38812 · Nov 20, 2024
- ESXi VMware ESXi Authentication Bypass Vulnerability CVE-2024-37085 · Jul 30, 2024