VMWare Products Multiple Vulnerabilities

Multiple vulnerabilities were identified in VMware products. A remote attacker could exploit some of these vulnerabilities to trigger elevation of privilege and remote code execution on the targeted system.

[Updated on 2024-11-19]

Updated Description and Risk level changed to extremely high.

Note: CVE-2024-38812 and CVE-2024-38813 are actively exploited in the wild. 

A malicious actor with network access to vCenter Server may trigger CVE-2024-38813 to escalate privileges to root by sending a specially crafted network packet.

A malicious actor with network access to vCenter Server may trigger CVE-2024-38812 by sending a specially crafted network packet potentially leading to remote code execution.