Description
VMware vCenter contains a denial-of-service vulnerability. A malicious actor who is authenticated through vCenter and has permission to perform API calls for guest OS customisation may trigger this vulnerability to create a denial-of-service condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| VMware | vCenter | 8.0 – < 8.0 U3g, 7.0 – < 7.0 U3v | 8.0 U3g |
| VMware | Cloud Foundation | 5.x, 4.5.x | — |
| VMware | Telco Cloud Platform | 5.x, 2.x | — |
| VMware | Telco Cloud Infrastructure | 2.x | — |
Advisories 1
- WID-SEC-2025-1671 VMware vCenter Server und Cloud Foundation: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Jul 29, 2025