Description
The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may exploit these issues to elevate privileges to root on vCenter Server Appliance.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | VMware vCenter Server | 8.0 – < 8.0 U2d, 7.0 – < 7.0 U3r | 8.0 U2d |
| — | VMware Cloud Foundation | 5.x, 4.x | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
vCenter Sudo Privilege Escalation
exploit/linux/local/vcenter_sudo_lpe
GitHub 3 repositories
-
Mr-r00t11/CVE-2024-37081 ★ 59 · Jul 9, 2024
A local privilege escalation vulnerability in VMware vCenter Server (and VMware Cloud Foundation) caused by a misconfiguration of sudo, allowing an authenticated user with non-administrative privileg…
-
mbadanoiu/CVE-2024-37081 ★ 10 · Jul 6, 2024
CVE-2024-37081: Multiple Local Privilege Escalation in VMware vCenter Server
-
CERTologists/Modified-CVE-2024-37081-POC ★ 0 · Jul 21, 2024
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 2
- WID-SEC-2024-1395 VMware vCenter Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 25, 2026
- NCSC-2024-0262 Kwetsbaarheden verholpen in VMware vCenter NCSC-NL (Netherlands) · Jun 18, 2024