VMware vCenter Server Multiple Vulnerabilities

Multiple vulnerabilities were identified in VMware vCenter Server. A remote attacker could exploit some of these vulnerabilities to trigger sensitive information disclosure and remote code execution on the targeted system.

Note:

For CVE-2023-34048, a malicious actor with network access to vCenter Server may use this vulnerability to trigger an out-of-bounds write potentially leading to remote code execution. The CVE-2023-34048 vulnerability is being exploited in the wild.

[Updated on 2024-01-22] 

The CVE-2023-34048 vulnerability is being exploited in the wild. Hence, the risk level is rated from Medium Risk to High Risk.