【Vulnerability Alert】 High-Risk Security Vulnerability in VMware vCenter Server (CVE-2024-37079 and CVE-2024-37080) – Immediate Update Required!
publish date :
2024-06-27
update date :
2024-06-27
Source: Ministry of education information & communication security contingency platform
| Publication Number | TACERT-ANA-2024062601064040 | Publication Time | 2024/06/26 13:10 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2024/06/26 13:10 |
| Impact Level | Medium | ||
| [Subject] 【Vulnerability Alert】 High-Risk Security Vulnerability in VMware vCenter Server (CVE-2024-37079 and CVE-2024-37080) – Immediate Update Required! |
|||
| [Content] Forwarded from the National Institute of Cyber Security NISAC-200-202406-00000158 Researchers have discovered heap buffer overflow vulnerabilities (CVE-2024-37079 and CVE-2024-37080) in VMware vCenter Server. Unauthenticated remote attackers can trigger these vulnerabilities by sending crafted packets, allowing them to remotely execute arbitrary code. Please verify and patch immediately. Information Sharing Level: WHITE (Information content can be publicly disclosed) |
|||
| [Affected Platform] ● vCenter Server 7.0 ● vCenter Server 8.0 ● Cloud Foundation (vCenter Server) 4.x ● Cloud Foundation (vCenter Server) 5.x |
|||
| [Recommended Actions] The official update patch for the vulnerability has been released. Please refer to the official instructions for updating at the following URL: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453 |
|||
| [Reference] 1. https://nvd.nist.gov/vuln/detail/CVE-2024-37079 2. https://nvd.nist.gov/vuln/detail/CVE-2024-37080 3. https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453 |
|||
(This notification is for informational purposes only and does not constitute a cybersecurity incident).
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
Organizer:
Computer Center
