{"uuid": "5adac745-5dab-4e8f-b58b-6efd3ed2c257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22005", "type": "seen", "source": "https://t.me/hacking_Attack/25129", "content": "otes that\u00a03,264 of these internet-facing hosts are \u201care potentially vulnerable\u201d and\u00a0436 are patched.\n\nStill the number of potential targets is quite high and given the threat actors\u2019 early interest\u00a0in scanning for vulnerable machines it is easy to conclude that attacks were imminent.\n\nTalking to BleepingComputer about his incomplete exploit, Jang said that\u00a0an average-skilled adversary should need about an hour to build a working, reliable version. He strongly advises administrators to patch their systems to defend against attacks leveraging\u00a0CVE-2021-22005.\nSee Also: Offensive Security Tool: Discover The U.S. Cybersecurity and Infrastructure Seurity Agency (CISA) urges critical infrastructrure organizations\u00a0with vulnerable vCenter deployments to apply the updates or the termporary workaround from VMware.\n\nA post from Censys\u00a0explains that a remote code execution exploit is not difficult to create based on the technical details already published in the public space:\n\u201cThe cURL-based exploit in blog post does not demonstrate direct code execution, although a savvy reader can use the information in this post to achieve this goal with some knowledge of the Linux operating system. Censys has decided to release this detail, given that opportunistic scanning is already taking place, and VMware\u2019s workaround mentions the specific vulnerable endpoint.\u201d\nThe researcher also published a video to demonstrate how an attacker could exploit the vulnerability:\nUpdate [September 24, 2021 \u2013 17:41 EST]: Shortly after publishing, BleepingComputer learned that hackers have started to exploit CVE-2021-22005 using code released by security researcher Jang. We have updated the article with information about the attacks.\nSource: www.bleepingcomputer.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/malware-800x449-1-90x90.jpg Malware devs trick Windows validation with malformed certs3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/ezgif.com-gif-maker-1-1-90x90.jpg Unpatched Apple Zero-Day in macOS Finder Allows Code Execution4 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/ezgif.com-gif-maker-1-90x90.jpg New macOS zero-day bug lets attackers run commands remotely5 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Windows-attack-90x90.jpg Hacked sites push TeamViewer using fake expired certificate alert6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/hackers-waging-living-off-land-attacks-on-azure-showcase_image-7-a-16158-90x90.jpg Azure Zero-Day Flaws Highlight Lurking Supply-Chain Risk1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Anonymous-90x90.png Anonymous leaks gigabytes of data from alt-right web host Epik1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/ezgif.com-gif-maker-90x90.jpg New malware uses Windows Subsystem for Linux for stealthy attacks1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Google-Chrome-Browser-90x90.jpg Pair of Google Chrome Zero-Day Bugs Actively Exploited2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/banner-2021.3-release-90x90.jpg Kali Linux 2021.3 released: Kali NetHunter on a smartwatch, wider OpenSSL compatibility, new tools2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/microsoft-exploit-90x90.jpg Microsoft Patches Actively Exploited Windows Zero-Day Bug2 weeks ago\nThe post Hackers exploiting critical VMware vCenter CVE-2021-22005 bug first appeared on Black Hat Ethical Hacking.\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:20.617604Z"}