CVE-2024-38813CISA KEV
VMware vCenter Server Privilege Escalation Vulnerability
CISA lists this VMware vCenter Server vulnerability as known exploited. The vendor's advisory has the fixed versions.
CISA catalog record
VMware vCenter contains an improper check for dropped privileges vulnerability. This vulnerability could allow an attacker with network access to the vCenter Server to escalate privileges to root by sending a specially crafted packet.
- Product
- vCenter Server
- Added to KEV
- 20 Nov 2024
- Federal remediation due
- 11 Dec 2024
- Known ransomware use
- Not reported