Description
vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds write potentially leading to remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| VMware | VMware vCenter Server | 8.0 – < 8.0U2, 7.0 – < 7.0U3o | 8.0U2 |
| VMware | VMware Cloud Foundation (VMware vCenter Server) | 5.x, 4.x | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- VMware vCenter Server - Out-of-Bounds Write http/cves/2023/CVE-2023-34048.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 1
- WID-SEC-2023-2740 VMware vCenter Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 18, 2024