Vulnerability-Lookup

CVE-2024-37085 (GCVE-0-2024-37085)

Vulnerability from cvelistv5 – Published: 2024-06-25 14:16 – Updated: 2025-10-21 22:56

CISA KEV KEVintel KEV

Summary

VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management https://blogs.vmware.com/vsphere/2012/09/joining-vsphere-hosts-to-active-directory.html by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.

Severity

6.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: active Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

Authentication bypass vulnerability
CWE-305 - Authentication Bypass by Primary Weakness

Assigner

vmware

References

2 references

URL	Tags
https://support.broadcom.com/web/ecx/support-cont…
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Impacted products

6 products

Vendor	Product	Version
n/a	VMware ESXi	Affected: 8.0 , < ESXi80U3-24022510 (custom) Affected: 7.0
n/a	VMware Cloud Foundation	Affected: 5.x Affected: 4.x
vmware	esxi	Affected: 7.0 cpe:2.3:o:vmware:esxi:7.0:-::::::
vmware	cloud_foundation	Affected: 5.0 , < 5.2 (custom) cpe:2.3:a:vmware:cloud_foundation:5.0:::::::*
vmware	cloud_foundation	Affected: 4.0 , < 5.0 (custom) cpe:2.3:a:vmware:cloud_foundation:4.0:::::::*
vmware	esxi	Affected: 8.0 , < ESXi80U3-24022510 (custom) cpe:2.3:o:vmware:esxi:8.0:::::::*

Date Public

2024-06-25 01:30

CISA KEV

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: 08dccffe-9ce0-49c5-b0df-5c1b2f91d794

Vulnerability ID: CVE-2024-37085

Status: Confirmed

Status Updated: 2024-07-30 00:00 UTC

Exploited: Yes

Timestamps

First Seen: 2024-07-30

Asserted: 2024-07-30

Scope

Notes: KEV entry: VMware ESXi Authentication Bypass Vulnerability | Affected: VMware / ESXi | Description: VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD. | Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. | Due date: 2024-08-20 | Known ransomware campaign use (KEV): Known | Notes (KEV): https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505; https://nvd.nist.gov/vuln/detail/CVE-2024-37085

Evidence

Type: Vendor Report

Signal: Successful Exploitation

Confidence: 80%

Source: cisa-kev

Details

Cwes	CWE-305
Feed	CISA Known Exploited Vulnerabilities Catalog
Product	ESXi
Due Date	2024-08-20
Date Added	2024-07-30
Vendorproject	VMware
Vulnerabilityname	VMware ESXi Authentication Bypass Vulnerability
Knownransomwarecampaignuse	Known

References

CVE-2024-37085

Created: 2026-02-02 12:26 UTC | Updated: 2026-02-06 07:17 UTC

KEVintel KEV

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: cd3d2ab6-5273-484c-8944-feda8a20a630

Vulnerability ID: CVE-2024-37085

Status: Confirmed

Status Updated: 2024-07-30 00:00 UTC

Exploited: Yes

Timestamps

First Seen: 2024-07-30

Asserted: 2024-07-30

Scope

Notes: KEVIntel entry: VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full... | Affected: VMware / VMware ESXi, VMware Cloud Foundation | CVSS: 6.8 (MEDIUM) | Used in malware: yes | Not yet in CISA KEV: False

Evidence

Type: Public Report

Signal: Confirmed Compromise

Confidence: 70%

Source: kevintel

Details

Feed	KEVIntel (kevintel.com)
Title	VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full...
Vendor	VMware
Product	VMware ESXi, VMware Cloud Foundation
Added Date	2024-07-30T00:00:00.000Z
Cvss Score	6.8
Epss Score	None
Cvss Severity	MEDIUM
Epss Percentile	None
Used In Malware	yes
Ahead Of Cisa Kev	None
Not Yet In Cisa Kev	False

References

Created: 2026-06-19 12:46 UTC | Updated: 2026-06-19 12:46 UTC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:vmware:esxi:7.0:-:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "esxi",
            "vendor": "vmware",
            "versions": [
              {
                "status": "affected",
                "version": "7.0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:vmware:cloud_foundation:5.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "cloud_foundation",
            "vendor": "vmware",
            "versions": [
              {
                "lessThan": "5.2",
                "status": "affected",
                "version": "5.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:vmware:cloud_foundation:4.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "cloud_foundation",
            "vendor": "vmware",
            "versions": [
              {
                "lessThan": "5.0",
                "status": "affected",
                "version": "4.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:vmware:esxi:8.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "esxi",
            "vendor": "vmware",
            "versions": [
              {
                "lessThan": "ESXi80U3-24022510",
                "status": "affected",
                "version": "8.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-37085",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-31T03:55:22.790428Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2024-07-30",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-37085"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-305",
                "description": "CWE-305 Authentication Bypass by Primary Weakness",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-21T22:56:21.754Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-37085"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2024-07-30T00:00:00.000Z",
            "value": "CVE-2024-37085 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T03:43:50.997Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "VMware ESXi",
          "vendor": "n/a",
          "versions": [
            {
              "lessThan": "ESXi80U3-24022510",
              "status": "affected",
              "version": "8.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "7.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "VMware Cloud Foundation",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "5.x"
            },
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        }
      ],
      "datePublic": "2024-06-25T01:30:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "VMware ESXi contains an authentication bypass vulnerability.\u0026nbsp;A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously\u003cstrong\u003e\u003cem\u003e \u003c/em\u003e\u003c/strong\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://blogs.vmware.com/vsphere/2012/09/joining-vsphere-hosts-to-active-directory.html\"\u003econfigured to use AD for user management\u003c/a\u003e\u003cstrong\u003e\u003cem\u003e \u003c/em\u003e\u003c/strong\u003eby re-creating the configured AD group (\u0027ESXi Admins\u0027 by default) after it was deleted from AD."
            }
          ],
          "value": "VMware ESXi contains an authentication bypass vulnerability.\u00a0A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously  configured to use AD for user management https://blogs.vmware.com/vsphere/2012/09/joining-vsphere-hosts-to-active-directory.html  by re-creating the configured AD group (\u0027ESXi Admins\u0027 by default) after it was deleted from AD."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Authentication bypass vulnerability",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-06-25T14:16:01.280Z",
        "orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
        "shortName": "vmware"
      },
      "references": [
        {
          "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
    "assignerShortName": "vmware",
    "cveId": "CVE-2024-37085",
    "datePublished": "2024-06-25T14:16:01.280Z",
    "dateReserved": "2024-06-03T05:40:17.632Z",
    "dateUpdated": "2025-10-21T22:56:21.754Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "cisa_known_exploited": {
      "cveID": "CVE-2024-37085",
      "cwes": "[\"CWE-305\"]",
      "dateAdded": "2024-07-30",
      "dueDate": "2024-08-20",
      "knownRansomwareCampaignUse": "Known",
      "notes": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505;   https://nvd.nist.gov/vuln/detail/CVE-2024-37085",
      "product": "ESXi",
      "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
      "shortDescription": "VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group (\u0027ESXi Admins\u0027 by default) after it was deleted from AD.",
      "vendorProject": "VMware",
      "vulnerabilityName": "VMware ESXi Authentication Bypass Vulnerability"
    },
    "epss": {
      "cve": "CVE-2024-37085",
      "date": "2026-06-19",
      "epss": "0.2677",
      "percentile": "0.97774"
    },
    "fkie_nvd": {
      "cisaActionDue": "2024-08-20",
      "cisaExploitAdd": "2024-07-30",
      "cisaRequiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName": "VMware ESXi Authentication Bypass Vulnerability",
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.0\", \"versionEndExcluding\": \"5.2\", \"matchCriteriaId\": \"7FA8DFE6-9C74-4711-A8AF-3B170876A1F9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:vmware:esxi:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"48D2E2D5-A0B8-4AF1-BF4A-30154F754C94\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:vmware:esxi:8.0:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"7A1A402A-9262-4B97-A0B7-E5AE045E394D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:vmware:esxi:8.0:a:*:*:*:*:*:*\", \"matchCriteriaId\": \"FE44B379-9943-4DD1-8514-26F87482AFA8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:vmware:esxi:8.0:b:*:*:*:*:*:*\", \"matchCriteriaId\": \"2A797377-8945-4D75-AA68-A768855E5842\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:vmware:esxi:8.0:c:*:*:*:*:*:*\", \"matchCriteriaId\": \"79D84D76-54BE-49E9-905C-7D65B4B42D68\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:vmware:esxi:8.0:update_1:*:*:*:*:*:*\", \"matchCriteriaId\": \"2F8767F7-7C3D-457D-9EAC-E8A30796F751\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:vmware:esxi:8.0:update_1a:*:*:*:*:*:*\", \"matchCriteriaId\": \"29AF8474-2D7A-4C5A-82B9-7A873AD90C2E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:vmware:esxi:8.0:update_1c:*:*:*:*:*:*\", \"matchCriteriaId\": \"7781A2CA-D927-48CD-9932-AE42B7BA1EFE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:vmware:esxi:8.0:update_1d:*:*:*:*:*:*\", \"matchCriteriaId\": \"18FD08C9-5895-4BF4-BBE0-C2DDA5F6B836\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:vmware:esxi:8.0:update_2:*:*:*:*:*:*\", \"matchCriteriaId\": \"360C1B71-5360-4379-B0DE-63BB8F5E6DA2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:vmware:esxi:8.0:update_2b:*:*:*:*:*:*\", \"matchCriteriaId\": \"B16ED7C1-9881-452A-8BE0-EDDEAEFE3D7B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:vmware:esxi:8.0:update_2c:*:*:*:*:*:*\", \"matchCriteriaId\": \"ED92209F-FBD6-43F9-9A15-3842B139FCC9\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"VMware ESXi contains an authentication bypass vulnerability.\\u00a0A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously  configured to use AD for user management https://blogs.vmware.com/vsphere/2012/09/joining-vsphere-hosts-to-active-directory.html  by re-creating the configured AD group (\u0027ESXi Admins\u0027 by default) after it was deleted from AD.\"}, {\"lang\": \"es\", \"value\": \"VMware ESXi contiene una vulnerabilidad de omisi\\u00f3n de autenticaci\\u00f3n. Un actor malicioso con suficientes permisos de Active Directory (AD) puede obtener acceso completo a un host ESXi que se configur\\u00f3 previamente para usar AD para la administraci\\u00f3n de usuarios https://blogs.vmware.com/vsphere/2012/09/joining-vsphere-hosts -to-active-directory.html recreando el grupo de AD configurado (\u0027Administradores de ESXi\u0027 de forma predeterminada) despu\\u00e9s de eliminarlo de AD.\"}]",
      "id": "CVE-2024-37085",
      "lastModified": "2024-12-20T16:52:43.217",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"security@vmware.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H\", \"baseScore\": 6.8, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 0.9, \"impactScore\": 5.9}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 7.2, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"HIGH\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.2, \"impactScore\": 5.9}]}",
      "published": "2024-06-25T15:15:12.377",
      "references": "[{\"url\": \"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505\", \"source\": \"security@vmware.com\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}]",
      "sourceIdentifier": "security@vmware.com",
      "vulnStatus": "Analyzed",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-287\"}]}, {\"source\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-305\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-37085\",\"sourceIdentifier\":\"security@vmware.com\",\"published\":\"2024-06-25T15:15:12.377\",\"lastModified\":\"2025-10-30T19:52:34.230\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"VMware ESXi contains an authentication bypass vulnerability.\u00a0A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously  configured to use AD for user management https://blogs.vmware.com/vsphere/2012/09/joining-vsphere-hosts-to-active-directory.html  by re-creating the configured AD group (\u0027ESXi Admins\u0027 by default) after it was deleted from AD.\"},{\"lang\":\"es\",\"value\":\"VMware ESXi contiene una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n. Un actor malicioso con suficientes permisos de Active Directory (AD) puede obtener acceso completo a un host ESXi que se configur\u00f3 previamente para usar AD para la administraci\u00f3n de usuarios https://blogs.vmware.com/vsphere/2012/09/joining-vsphere-hosts -to-active-directory.html recreando el grupo de AD configurado (\u0027Administradores de ESXi\u0027 de forma predeterminada) despu\u00e9s de eliminarlo de AD.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security@vmware.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":6.8,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":0.9,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.2,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.2,\"impactScore\":5.9}]},\"cisaExploitAdd\":\"2024-07-30\",\"cisaActionDue\":\"2024-08-20\",\"cisaRequiredAction\":\"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.\",\"cisaVulnerabilityName\":\"VMware ESXi Authentication Bypass Vulnerability\",\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-287\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-305\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.0\",\"versionEndExcluding\":\"5.2\",\"matchCriteriaId\":\"7FA8DFE6-9C74-4711-A8AF-3B170876A1F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:vmware:esxi:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"48D2E2D5-A0B8-4AF1-BF4A-30154F754C94\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:vmware:esxi:8.0:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"7A1A402A-9262-4B97-A0B7-E5AE045E394D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:vmware:esxi:8.0:a:*:*:*:*:*:*\",\"matchCriteriaId\":\"FE44B379-9943-4DD1-8514-26F87482AFA8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:vmware:esxi:8.0:b:*:*:*:*:*:*\",\"matchCriteriaId\":\"2A797377-8945-4D75-AA68-A768855E5842\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:vmware:esxi:8.0:c:*:*:*:*:*:*\",\"matchCriteriaId\":\"79D84D76-54BE-49E9-905C-7D65B4B42D68\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:vmware:esxi:8.0:update_1:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F8767F7-7C3D-457D-9EAC-E8A30796F751\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:vmware:esxi:8.0:update_1a:*:*:*:*:*:*\",\"matchCriteriaId\":\"29AF8474-2D7A-4C5A-82B9-7A873AD90C2E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:vmware:esxi:8.0:update_1c:*:*:*:*:*:*\",\"matchCriteriaId\":\"7781A2CA-D927-48CD-9932-AE42B7BA1EFE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:vmware:esxi:8.0:update_1d:*:*:*:*:*:*\",\"matchCriteriaId\":\"18FD08C9-5895-4BF4-BBE0-C2DDA5F6B836\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:vmware:esxi:8.0:update_2:*:*:*:*:*:*\",\"matchCriteriaId\":\"360C1B71-5360-4379-B0DE-63BB8F5E6DA2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:vmware:esxi:8.0:update_2b:*:*:*:*:*:*\",\"matchCriteriaId\":\"B16ED7C1-9881-452A-8BE0-EDDEAEFE3D7B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:vmware:esxi:8.0:update_2c:*:*:*:*:*:*\",\"matchCriteriaId\":\"ED92209F-FBD6-43F9-9A15-3842B139FCC9\"}]}]}],\"references\":[{\"url\":\"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505\",\"source\":\"security@vmware.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-37085\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"US Government Resource\"]}]}}",
    "vulnrichment": {
      "containers": "{\"cna\": {\"affected\": [{\"defaultStatus\": \"unaffected\", \"product\": \"VMware ESXi\", \"vendor\": \"n/a\", \"versions\": [{\"lessThan\": \"ESXi80U3-24022510\", \"status\": \"affected\", \"version\": \"8.0\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"7.0\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"VMware Cloud Foundation\", \"vendor\": \"n/a\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.x\"}, {\"status\": \"affected\", \"version\": \"4.x\"}]}], \"datePublic\": \"2024-06-25T01:30:00.000Z\", \"descriptions\": [{\"lang\": \"en\", \"supportingMedia\": [{\"base64\": false, \"type\": \"text/html\", \"value\": \"VMware ESXi contains an authentication bypass vulnerability.\u0026nbsp;A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously\u003cstrong\u003e\u003cem\u003e \u003c/em\u003e\u003c/strong\u003e\u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://blogs.vmware.com/vsphere/2012/09/joining-vsphere-hosts-to-active-directory.html\\\"\u003econfigured to use AD for user management\u003c/a\u003e\u003cstrong\u003e\u003cem\u003e \u003c/em\u003e\u003c/strong\u003eby re-creating the configured AD group (\u0027ESXi Admins\u0027 by default) after it was deleted from AD.\"}], \"value\": \"VMware ESXi contains an authentication bypass vulnerability.\\u00a0A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously  configured to use AD for user management https://blogs.vmware.com/vsphere/2012/09/joining-vsphere-hosts-to-active-directory.html  by re-creating the configured AD group (\u0027ESXi Admins\u0027 by default) after it was deleted from AD.\"}], \"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 6.8, \"baseSeverity\": \"MEDIUM\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"HIGH\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"REQUIRED\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H\", \"version\": \"3.1\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"Authentication bypass vulnerability\", \"lang\": \"en\"}]}], \"providerMetadata\": {\"orgId\": \"dcf2e128-44bd-42ed-91e8-88f912c1401d\", \"shortName\": \"vmware\", \"dateUpdated\": \"2024-06-25T14:16:01.280Z\"}, \"references\": [{\"url\": \"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505\"}], \"source\": {\"discovery\": \"UNKNOWN\"}, \"x_generator\": {\"engine\": \"Vulnogram 0.2.0\"}}, \"adp\": [{\"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T03:43:50.997Z\"}, \"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505\", \"tags\": [\"x_transferred\"]}]}, {\"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-37085\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-07-31T03:55:22.790428Z\"}}}, {\"other\": {\"type\": \"kev\", \"content\": {\"dateAdded\": \"2024-07-30\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-37085\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:o:vmware:esxi:7.0:-:*:*:*:*:*:*\"], \"vendor\": \"vmware\", \"product\": \"esxi\", \"versions\": [{\"status\": \"affected\", \"version\": \"7.0\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:a:vmware:cloud_foundation:5.0:*:*:*:*:*:*:*\"], \"vendor\": \"vmware\", \"product\": \"cloud_foundation\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.0\", \"lessThan\": \"5.2\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:a:vmware:cloud_foundation:4.0:*:*:*:*:*:*:*\"], \"vendor\": \"vmware\", \"product\": \"cloud_foundation\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.0\", \"lessThan\": \"5.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:o:vmware:esxi:8.0:*:*:*:*:*:*:*\"], \"vendor\": \"vmware\", \"product\": \"esxi\", \"versions\": [{\"status\": \"affected\", \"version\": \"8.0\", \"lessThan\": \"ESXi80U3-24022510\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-305\", \"description\": \"CWE-305 Authentication Bypass by Primary Weakness\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-06-26T13:23:12.569Z\"}, \"timeline\": [{\"time\": \"2024-07-30T00:00:00+00:00\", \"lang\": \"en\", \"value\": \"CVE-2024-37085 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}]}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-37085\", \"assignerOrgId\": \"dcf2e128-44bd-42ed-91e8-88f912c1401d\", \"state\": \"PUBLISHED\", \"assignerShortName\": \"vmware\", \"dateReserved\": \"2024-06-03T05:40:17.632Z\", \"datePublished\": \"2024-06-25T14:16:01.280Z\", \"dateUpdated\": \"2025-07-28T19:43:08.267Z\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

CERTFR-2024-AVI-0519

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, un contournement de la politique de sécurité et un déni de service.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

L'éditeur indique que les versions 7.0.x d'ESXi et 4.x de Cloud Foundation ne bénéficieront pas de correctif de sécurité pour la vulnérabilité CVE-2024-37085. Ces versions bénéficient d'un correctif (ESXi70U3sq-23794019) pour la vulnérabilité CVE-2024-37086. Des correctifs sont prévus pour les trois vulnérabilités pour les versions 5.x de VMware Cloud Foundation.

Impacted products

Vendor	Product	Description
VMware	ESXi	VMWare ESXi versions 7.0.x sans le correctif de sécurité ESXi70U3sq-23794019 pour la vulnérabilité CVE-2024-37086
VMware	vCenter Server	VMware vCenter Server versions 8.0.x antérieures à 8.0 U3
VMware	vCenter Server	VMware vCenter Server versions 7.0.x antérieures à 7.0 U3q
VMware	ESXi	VMWare ESXi versions 8.0.x sans le correctif de sécurité ESXi80U3-24022510
VMware	N/A	VMware Cloud Foundation versions 4.x et 5.x
VMware	ESXi	VMWare ESXi versions 7.0.x

References

Title

Publication Time

CERTFR-2024-AVI-0519

Vulnerability from certfr_avis - Published: - Updated:

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
VMware	ESXi	VMWare ESXi versions 7.0.x sans le correctif de sécurité ESXi70U3sq-23794019 pour la vulnérabilité CVE-2024-37086
VMware	vCenter Server	VMware vCenter Server versions 8.0.x antérieures à 8.0 U3
VMware	vCenter Server	VMware vCenter Server versions 7.0.x antérieures à 7.0 U3q
VMware	ESXi	VMWare ESXi versions 8.0.x sans le correctif de sécurité ESXi80U3-24022510
VMware	N/A	VMware Cloud Foundation versions 4.x et 5.x
VMware	ESXi	VMWare ESXi versions 7.0.x

References

Title

Publication Time

FKIE_CVE-2024-37085

Vulnerability from fkie_nvd - Published: 2024-06-25 15:15 - Updated: 2026-06-17 07:37

CISA KEV KEVintel KEV

Severity

6.8 (Medium) - CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
7.2 (High) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Summary

References

URL	Tags
security@vmware.com	https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505	Patch, Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0	https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-37085	US Government Resource

Impacted products

Vendor	Product	Version
vmware	cloud_foundation	*
vmware	esxi	7.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "VMware ESXi",
          "vendor": "n/a",
          "versions": [
            {
              "lessThan": "ESXi80U3-24022510",
              "status": "affected",
              "version": "8.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "7.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "VMware Cloud Foundation",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "5.x"
            },
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        }
      ],
      "source": "security@vmware.com"
    },
    {
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:o:vmware:esxi:7.0:-:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "esxi",
          "vendor": "vmware",
          "versions": [
            {
              "status": "affected",
              "version": "7.0"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:vmware:cloud_foundation:5.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "cloud_foundation",
          "vendor": "vmware",
          "versions": [
            {
              "lessThan": "5.2",
              "status": "affected",
              "version": "5.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:vmware:cloud_foundation:4.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "cloud_foundation",
          "vendor": "vmware",
          "versions": [
            {
              "lessThan": "5.0",
              "status": "affected",
              "version": "4.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:vmware:esxi:8.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "esxi",
          "vendor": "vmware",
          "versions": [
            {
              "lessThan": "ESXi80U3-24022510",
              "status": "affected",
              "version": "8.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "cisaActionDue": "2024-08-20",
  "cisaExploitAdd": "2024-07-30",
  "cisaRequiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
  "cisaVulnerabilityName": "VMware ESXi Authentication Bypass Vulnerability",
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7FA8DFE6-9C74-4711-A8AF-3B170876A1F9",
              "versionEndExcluding": "5.2",
              "versionStartIncluding": "4.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "48D2E2D5-A0B8-4AF1-BF4A-30154F754C94",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:-:*:*:*:*:*:*",
              "matchCriteriaId": "7A1A402A-9262-4B97-A0B7-E5AE045E394D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:a:*:*:*:*:*:*",
              "matchCriteriaId": "FE44B379-9943-4DD1-8514-26F87482AFA8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:b:*:*:*:*:*:*",
              "matchCriteriaId": "2A797377-8945-4D75-AA68-A768855E5842",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:c:*:*:*:*:*:*",
              "matchCriteriaId": "79D84D76-54BE-49E9-905C-7D65B4B42D68",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_1:*:*:*:*:*:*",
              "matchCriteriaId": "2F8767F7-7C3D-457D-9EAC-E8A30796F751",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_1a:*:*:*:*:*:*",
              "matchCriteriaId": "29AF8474-2D7A-4C5A-82B9-7A873AD90C2E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_1c:*:*:*:*:*:*",
              "matchCriteriaId": "7781A2CA-D927-48CD-9932-AE42B7BA1EFE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_1d:*:*:*:*:*:*",
              "matchCriteriaId": "18FD08C9-5895-4BF4-BBE0-C2DDA5F6B836",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_2:*:*:*:*:*:*",
              "matchCriteriaId": "360C1B71-5360-4379-B0DE-63BB8F5E6DA2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_2b:*:*:*:*:*:*",
              "matchCriteriaId": "B16ED7C1-9881-452A-8BE0-EDDEAEFE3D7B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_2c:*:*:*:*:*:*",
              "matchCriteriaId": "ED92209F-FBD6-43F9-9A15-3842B139FCC9",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "VMware ESXi contains an authentication bypass vulnerability.\u00a0A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously  configured to use AD for user management https://blogs.vmware.com/vsphere/2012/09/joining-vsphere-hosts-to-active-directory.html  by re-creating the configured AD group (\u0027ESXi Admins\u0027 by default) after it was deleted from AD."
    },
    {
      "lang": "es",
      "value": "VMware ESXi contiene una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n. Un actor malicioso con suficientes permisos de Active Directory (AD) puede obtener acceso completo a un host ESXi que se configur\u00f3 previamente para usar AD para la administraci\u00f3n de usuarios https://blogs.vmware.com/vsphere/2012/09/joining-vsphere-hosts -to-active-directory.html recreando el grupo de AD configurado (\u0027Administradores de ESXi\u0027 de forma predeterminada) despu\u00e9s de eliminarlo de AD."
    }
  ],
  "id": "CVE-2024-37085",
  "lastModified": "2026-06-17T07:37:43.940",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 6.8,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 0.9,
        "impactScore": 5.9,
        "source": "security@vmware.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.2,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.2,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-37085",
          "options": [
            {
              "exploitation": "active"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2024-07-31T03:55:22.790428Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2024-06-25T15:15:12.377",
  "references": [
    {
      "source": "security@vmware.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "US Government Resource"
      ],
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-37085"
    }
  ],
  "sourceIdentifier": "security@vmware.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-305"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}

GHSA-485M-923F-95WX

Vulnerability from github – Published: 2024-06-25 15:31 – Updated: 2025-10-22 00:33

Details

Severity

6.8 (Medium)


                  
                    CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-37085"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-287",
      "CWE-305"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-06-25T15:15:12Z",
    "severity": "MODERATE"
  },
  "details": "VMware ESXi contains an authentication bypass vulnerability.\u00a0A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously  configured to use AD for user management https://blogs.vmware.com/vsphere/2012/09/joining-vsphere-hosts-to-active-directory.html  by re-creating the configured AD group (\u0027ESXi Admins\u0027 by default) after it was deleted from AD.",
  "id": "GHSA-485m-923f-95wx",
  "modified": "2025-10-22T00:33:03Z",
  "published": "2024-06-25T15:31:09Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-37085"
    },
    {
      "type": "WEB",
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505"
    },
    {
      "type": "WEB",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-37085"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

NCSC-2024-0269

Vulnerability from csaf_ncscnl - Published: 2024-06-26 09:02 - Updated: 2024-07-30 09:32

Summary

Kwetsbaarheden verholpen in VMware ESXi en vCenter Server

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten: VMware heeft kwetsbaarheden verholpen in ESXi en vCenter Server.

Interpretaties: Een kwaadwillende kan de kwetsbaarheden misbruiken om een Denial-of-Service op de host te veroorzaken, of om zichzelf verhoogde rechten toe te kennen en zo handelingen uit te voeren waarvoor de kwaadwillende aanvankelijk niet is geautoriseerd. Hiervoor dient de kwaadwillende wel bepaalde rechten te hebben in de Active Directory welke voor autorisaties wordt gebruikt. Onderzoekers bij Microsoft melden actief misbruik waar te nemen van de kwetsbaarheid met kenmerk CVE-2024-37085, waarbij ransomware wordt geïnstalleerd. Succesvol misbruik vereist voorafgaande authenticatie en autorisatie.

Oplossingen: VMware heeft updates uitgebracht om de kwetsbaarheden te verhelpen in ESXi en vCenter Server. Zie bijgevoegde referenties voor meer informatie.

Kans: medium

Schade: high

CWE-125: Out-of-bounds Read

CWE-287: Improper Authentication

CWE-404: Improper Resource Shutdown or Release

CVE-2024-37085

CWE-287 - Improper Authentication

Affected products

Known affected 6 products

Product	Identifier	Version
vmware_esxi n_a	`cpe:2.3:a:n_a:vmware_esxi:8.0:::::::*`	—
vmware_esxi n_a	`cpe:2.3:a:n_a:vmware_esxi:7.0:::::::*`	—
vmware_cloud_foundation n_a	`cpe:2.3:a:n_a:vmware_cloud_foundation:5.x:::::::*`	—
vmware_cloud_foundation n_a	`cpe:2.3:a:n_a:vmware_cloud_foundation:4.x:::::::*`	—
cloud_foundation vmware	`cpe:2.3:a:vmware:cloud_foundation::::::::`	—
esxi vmware	`cpe:2.3:a:vmware:esxi::::::::`	—

CVE-2024-37086

6.8 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

CWE-125 - Out-of-bounds Read

Affected products

Known affected 6 products

Product	Identifier	Version
esxi n_a	`cpe:2.3:a:n_a:esxi:8.0:::::::*`	—
esxi n_a	`cpe:2.3:a:n_a:esxi:7.0:::::::*`	—
vmware_cloud_foundation n_a	`cpe:2.3:a:n_a:vmware_cloud_foundation:5.x:::::::*`	—
vmware_cloud_foundation n_a	`cpe:2.3:a:n_a:vmware_cloud_foundation:4.x:::::::*`	—
cloud_foundation vmware	`cpe:2.3:a:vmware:cloud_foundation::::::::`	—
esxi vmware	`cpe:2.3:a:vmware:esxi::::::::`	—

CVE-2024-37087

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-404 - Improper Resource Shutdown or Release

Affected products

Known affected 6 products

Product	Identifier	Version
vcenter_server n_a	`cpe:2.3:a:n_a:vcenter_server:8.0:::::::*`	—
vcenter_server n_a	`cpe:2.3:a:n_a:vcenter_server:7.0:::::::*`	—
vmware_cloud_foundation n_a	`cpe:2.3:a:n_a:vmware_cloud_foundation:5.x:::::::*`	—
vmware_cloud_foundation n_a	`cpe:2.3:a:n_a:vmware_cloud_foundation:4.x:::::::*`	—
cloud_foundation vmware	`cpe:2.3:a:vmware:cloud_foundation::::::::`	—
vcenter_server vmware	`cpe:2.3:a:vmware:vcenter_server::::::::`	—

References

5 references

URL	Category
https://support.broadcom.com/web/ecx/support-cont…	external
https://www.microsoft.com/en-us/security/blog/202…	external
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "VMware heeft kwetsbaarheden verholpen in ESXi en vCenter Server.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om een Denial-of-Service op de host te veroorzaken, of om zichzelf verhoogde rechten toe te kennen en zo handelingen uit te voeren waarvoor de kwaadwillende aanvankelijk niet is geautoriseerd. Hiervoor dient de kwaadwillende wel bepaalde rechten te hebben in de Active Directory welke voor autorisaties wordt gebruikt.\n\nOnderzoekers bij Microsoft melden actief misbruik waar te nemen van de kwetsbaarheid met kenmerk CVE-2024-37085, waarbij ransomware wordt ge\u00efnstalleerd. Succesvol misbruik vereist voorafgaande authenticatie en autorisatie.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "VMware heeft updates uitgebracht om de kwetsbaarheden te verhelpen in ESXi en vCenter Server. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Read",
        "title": "CWE-125"
      },
      {
        "category": "general",
        "text": "Improper Authentication",
        "title": "CWE-287"
      },
      {
        "category": "general",
        "text": "Improper Resource Shutdown or Release",
        "title": "CWE-404"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference - certbundde; cveprojectv5; nvd",
        "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505"
      },
      {
        "category": "external",
        "summary": "Reference - ncscclear",
        "url": "https://www.microsoft.com/en-us/security/blog/2024/07/29/ransomware-operators-exploit-esxi-hypervisor-vulnerability-for-mass-encryption/"
      }
    ],
    "title": "Kwetsbaarheden verholpen in VMware ESXi en vCenter Server",
    "tracking": {
      "current_release_date": "2024-07-30T09:32:13.311694Z",
      "id": "NCSC-2024-0269",
      "initial_release_date": "2024-06-26T09:02:10.988453Z",
      "revision_history": [
        {
          "date": "2024-06-26T09:02:10.988453Z",
          "number": "0",
          "summary": "Initiele versie"
        },
        {
          "date": "2024-07-30T09:32:13.311694Z",
          "number": "1",
          "summary": "Onderzoekers bij Microsoft melden dat de kwetsbaarheid met kenmerk CVE-2024-37085 misbruikt wordt om ransomware te installeren op kwetsbare eSXI systemen. Achtergrondartikel toegevoegd. Omdat misbruik voorafgaande rechten vereist wijzigt de inschaling verder niet."
        }
      ],
      "status": "final",
      "version": "1.0.1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "esxi",
            "product": {
              "name": "esxi",
              "product_id": "CSAFPID-1487773",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:n_a:esxi:7.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "esxi",
            "product": {
              "name": "esxi",
              "product_id": "CSAFPID-1487772",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:n_a:esxi:8.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "vcenter_server",
            "product": {
              "name": "vcenter_server",
              "product_id": "CSAFPID-1487775",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:n_a:vcenter_server:7.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "vcenter_server",
            "product": {
              "name": "vcenter_server",
              "product_id": "CSAFPID-1487774",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:n_a:vcenter_server:8.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "vmware_cloud_foundation",
            "product": {
              "name": "vmware_cloud_foundation",
              "product_id": "CSAFPID-1464833",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:n_a:vmware_cloud_foundation:4.x:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "vmware_cloud_foundation",
            "product": {
              "name": "vmware_cloud_foundation",
              "product_id": "CSAFPID-1464832",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:n_a:vmware_cloud_foundation:5.x:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "vmware_esxi",
            "product": {
              "name": "vmware_esxi",
              "product_id": "CSAFPID-966130",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:n_a:vmware_esxi:7.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "vmware_esxi",
            "product": {
              "name": "vmware_esxi",
              "product_id": "CSAFPID-966129",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:n_a:vmware_esxi:8.0:*:*:*:*:*:*:*"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "n_a"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "cloud_foundation",
            "product": {
              "name": "cloud_foundation",
              "product_id": "CSAFPID-342703",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "esxi",
            "product": {
              "name": "esxi",
              "product_id": "CSAFPID-549109",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:vmware:esxi:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "vcenter_server",
            "product": {
              "name": "vcenter_server",
              "product_id": "CSAFPID-3668",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:vmware:vcenter_server:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "esxi",
            "product": {
              "name": "esxi",
              "product_id": "CSAFPID-741033",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:vmware:esxi:*:*:*:*:*:*:*:*"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "vmware"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-37085",
      "cwe": {
        "id": "CWE-287",
        "name": "Improper Authentication"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Authentication",
          "title": "CWE-287"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-966129",
          "CSAFPID-966130",
          "CSAFPID-1464832",
          "CSAFPID-1464833",
          "CSAFPID-342703",
          "CSAFPID-549109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-37085",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37085.json"
        }
      ],
      "title": "CVE-2024-37085"
    },
    {
      "cve": "CVE-2024-37086",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1487772",
          "CSAFPID-1487773",
          "CSAFPID-1464832",
          "CSAFPID-1464833",
          "CSAFPID-342703",
          "CSAFPID-549109"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-37086",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37086.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1487772",
            "CSAFPID-1487773",
            "CSAFPID-1464832",
            "CSAFPID-1464833",
            "CSAFPID-342703",
            "CSAFPID-549109"
          ]
        }
      ],
      "title": "CVE-2024-37086"
    },
    {
      "cve": "CVE-2024-37087",
      "cwe": {
        "id": "CWE-404",
        "name": "Improper Resource Shutdown or Release"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Resource Shutdown or Release",
          "title": "CWE-404"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1487774",
          "CSAFPID-1487775",
          "CSAFPID-1464832",
          "CSAFPID-1464833",
          "CSAFPID-342703",
          "CSAFPID-3668"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-37087",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37087.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1487774",
            "CSAFPID-1487775",
            "CSAFPID-1464832",
            "CSAFPID-1464833",
            "CSAFPID-342703",
            "CSAFPID-3668"
          ]
        }
      ],
      "title": "CVE-2024-37087"
    }
  ]
}

WID-SEC-W-2024-1460

Vulnerability from csaf_certbund - Published: 2024-06-25 22:00 - Updated: 2024-08-27 22:00

Summary

VMware ESXi, VMware Cloud Foundation and VMware vCenter Server: Mehrere Schwachstellen

Severity

Mittel

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Die Virtualisierungssoftware von VMware ermöglicht die simultane Ausführung von verschiedenen Betriebssystemen auf einem Host-System. VMware Cloud Foundation ist eine Hybrid Cloud-Plattform für VM-Management und Container-Orchestrierung.

Angriff: Ein Angreifer kann mehrere Schwachstellen in VMware ESXi, VMware Cloud Foundation und VMware vCenter Server ausnutzen, um Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand zu erzeugen.

Betroffene Betriebssysteme: - Windows

CVE-2024-37085

Es besteht eine Schwachstelle in VMware ESXi und VMware Cloud Foundation. Dieser Fehler besteht aufgrund einer unsachgemäßen Rechteverwaltung im Active Directory, die es ermöglicht, die konfigurierte AD-Gruppe neu zu erstellen, nachdem sie gelöscht wurde. Ein entfernter authentifizierter Angreifer kann diese Schwachstelle ausnutzen, um Sicherheitsmaßnahmen zu umgehen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.

Affected products

Known affected 3 products

Product	Identifier	Version
VMware Cloud Foundation VMware	`cpe:/a:vmware:cloud_foundation:-`	—
Dell Storage PowerStore Dell / Storage	`cpe:/h:dell:storage:powerstore`	PowerStore
VMware ESXi <ESXi80U3-24022510 VMware / ESXi		<ESXi80U3-24022510

CVE-2024-37086

Es besteht eine Schwachstelle in VMware ESXi und VMware Cloud Foundation. Dieser Fehler besteht aufgrund eines Out-of-bounds-Read. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um einen Denial-of-Service-Zustand des Hosts zu erzeugen.

Affected products

Known affected 4 products

Product	Identifier	Version
VMware ESXi <ESXi70U3sq-23794019 VMware / ESXi		<ESXi70U3sq-23794019
VMware Cloud Foundation VMware	`cpe:/a:vmware:cloud_foundation:-`	—
Dell Storage PowerStore Dell / Storage	`cpe:/h:dell:storage:powerstore`	PowerStore
VMware ESXi <ESXi80U3-24022510 VMware / ESXi		<ESXi80U3-24022510

CVE-2024-37087

Es besteht eine Schwachstelle in VMware Cloud Foundation und VMware vCenter Server. Dieser Fehler wurde noch nicht im Detail veröffentlicht. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen.

Affected products

Known affected 4 products

Product	Identifier	Version
VMware vCenter Server <8.0 U3 VMware / vCenter Server		<8.0 U3
VMware Cloud Foundation VMware	`cpe:/a:vmware:cloud_foundation:-`	—
VMware vCenter Server <7.0 U3q VMware / vCenter Server		<7.0 U3q
Dell Storage PowerStore Dell / Storage	`cpe:/h:dell:storage:powerstore`	PowerStore

References

5 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://support.broadcom.com/web/ecx/support-cont…	external
https://www.microsoft.com/en-us/security/blog/202…	external
https://www.dell.com/support/kbdoc/de-de/00022807…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Die Virtualisierungssoftware von VMware erm\u00f6glicht die simultane Ausf\u00fchrung von verschiedenen Betriebssystemen auf einem Host-System.\r\nVMware Cloud Foundation ist eine Hybrid Cloud-Plattform f\u00fcr VM-Management und Container-Orchestrierung.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in VMware ESXi, VMware Cloud Foundation und VMware vCenter Server ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen oder einen Denial-of-Service-Zustand zu erzeugen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-1460 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1460.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-1460 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1460"
      },
      {
        "category": "external",
        "summary": "Broadcom Security Advisory vom 2024-06-25",
        "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505"
      },
      {
        "category": "external",
        "summary": "Microsoft Threat Intelligence vom 2024-07-29",
        "url": "https://www.microsoft.com/en-us/security/blog/2024/07/29/ransomware-operators-exploit-esxi-hypervisor-vulnerability-for-mass-encryption/"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2024-365 vom 2024-08-27",
        "url": "https://www.dell.com/support/kbdoc/de-de/000228074/dsa-2024-365-dell-powerstore-family-security-update-for-vmware-vulnerabilities"
      }
    ],
    "source_lang": "en-US",
    "title": "VMware ESXi, VMware Cloud Foundation and VMware vCenter Server: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2024-08-27T22:00:00.000+00:00",
      "generator": {
        "date": "2024-08-28T08:10:22.813+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.6"
        }
      },
      "id": "WID-SEC-W-2024-1460",
      "initial_release_date": "2024-06-25T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-06-25T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2024-07-29T22:00:00.000+00:00",
          "number": "2",
          "summary": "Aktive Ausnutzung gemeldet"
        },
        {
          "date": "2024-08-27T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Dell aufgenommen"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "PowerStore",
                "product": {
                  "name": "Dell Storage PowerStore",
                  "product_id": "T037119",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:dell:storage:powerstore"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Storage"
          }
        ],
        "category": "vendor",
        "name": "Dell"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "VMware Cloud Foundation",
            "product": {
              "name": "VMware Cloud Foundation",
              "product_id": "T035644",
              "product_identification_helper": {
                "cpe": "cpe:/a:vmware:cloud_foundation:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cESXi80U3-24022510",
                "product": {
                  "name": "VMware ESXi \u003cESXi80U3-24022510",
                  "product_id": "T035643"
                }
              },
              {
                "category": "product_version",
                "name": "ESXi80U3-24022510",
                "product": {
                  "name": "VMware ESXi ESXi80U3-24022510",
                  "product_id": "T035643-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:vmware:esxi:esxi80u3-24022510"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cESXi70U3sq-23794019",
                "product": {
                  "name": "VMware ESXi \u003cESXi70U3sq-23794019",
                  "product_id": "T035645"
                }
              },
              {
                "category": "product_version",
                "name": "ESXi70U3sq-23794019",
                "product": {
                  "name": "VMware ESXi ESXi70U3sq-23794019",
                  "product_id": "T035645-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:vmware:esxi:esxi70u3sq-23794019"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "ESXi"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c7.0 U3q",
                "product": {
                  "name": "VMware vCenter Server \u003c7.0 U3q",
                  "product_id": "T034962"
                }
              },
              {
                "category": "product_version",
                "name": "7.0 U3q",
                "product": {
                  "name": "VMware vCenter Server 7.0 U3q",
                  "product_id": "T034962-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:vmware:vcenter_server:7.0_u3q"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c8.0 U3",
                "product": {
                  "name": "VMware vCenter Server \u003c8.0 U3",
                  "product_id": "T035646"
                }
              },
              {
                "category": "product_version",
                "name": "8.0 U3",
                "product": {
                  "name": "VMware vCenter Server 8.0 U3",
                  "product_id": "T035646-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:vmware:vcenter_server:8.0_u3"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "vCenter Server"
          }
        ],
        "category": "vendor",
        "name": "VMware"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-37085",
      "notes": [
        {
          "category": "description",
          "text": "Es besteht eine Schwachstelle in VMware ESXi und VMware Cloud Foundation. Dieser Fehler besteht aufgrund einer unsachgem\u00e4\u00dfen Rechteverwaltung im Active Directory, die es erm\u00f6glicht, die konfigurierte AD-Gruppe neu zu erstellen, nachdem sie gel\u00f6scht wurde. Ein entfernter authentifizierter Angreifer kann diese Schwachstelle ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T035644",
          "T037119",
          "T035643"
        ]
      },
      "release_date": "2024-06-25T22:00:00.000+00:00",
      "title": "CVE-2024-37085"
    },
    {
      "cve": "CVE-2024-37086",
      "notes": [
        {
          "category": "description",
          "text": "Es besteht eine Schwachstelle in VMware ESXi und VMware Cloud Foundation. Dieser Fehler besteht aufgrund eines Out-of-bounds-Read. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um einen Denial-of-Service-Zustand des Hosts zu erzeugen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T035645",
          "T035644",
          "T037119",
          "T035643"
        ]
      },
      "release_date": "2024-06-25T22:00:00.000+00:00",
      "title": "CVE-2024-37086"
    },
    {
      "cve": "CVE-2024-37087",
      "notes": [
        {
          "category": "description",
          "text": "Es besteht eine Schwachstelle in VMware Cloud Foundation und VMware vCenter Server. Dieser Fehler wurde noch nicht im Detail ver\u00f6ffentlicht. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T035646",
          "T035644",
          "T034962",
          "T037119"
        ]
      },
      "release_date": "2024-06-25T22:00:00.000+00:00",
      "title": "CVE-2024-37087"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2024-37085 (GCVE-0-2024-37085)

CISA KEV

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Vendor Report Successful Exploitation Confidence: 80% Source: cisa-kev

Details

References

KEVintel KEV

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Public Report Confirmed Compromise Confidence: 70% Source: kevintel

Details

References

CERTFR-2024-AVI-0519

Solutions

CERTFR-2024-AVI-0519

Solutions

FKIE_CVE-2024-37085

GHSA-485M-923F-95WX

NCSC-2024-0269

WID-SEC-W-2024-1460

Tags

Sightings

Nomenclature