POC Code Released for Critical VMware vSphere Vulnerability
NJCCIC Advisory
Original Release Date: 2/25/2021
Summary
A new vulnerability, CVE-2021-21972, in VMware vCenter could allow a threat actor to take over systems and their associated networks. Over 6,700 VMware vCenter servers are exposed online and vulnerable to the vSphere Client (HTML5) remote code execution flaw. Proof-of-concept (POC) exploitation code has been released online and active scans for vulnerable systems is ongoing. Many large corporations use VMware vCenter software in their networks.
Recommendations
The NJCCIC highly advises administrators update or apply workarounds to VMware vCenter as soon as possible, after appropriate testing. More information can be found in the ZDNet article.
The NJCCIC is a component organization within the New Jersey Office of Homeland Security and Preparedness. We are the State's one-stop-shop for cyber threat analysis, incident reporting, and information sharing and are committed to making New Jersey more resilient to cyber threats by spreading awareness and promoting the adoption of best practices.
View our Privacy Policy here.
View our Site Index here.