coldbraid

CVE-2023-34048 VMware VCenter Server

VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol that allows an attacker to conduct remote code execution.

CVSS
not scored

CWE-787

On CISA’s exploited list

VMware vCenter Server Out-of-Bounds Write Vulnerability

Added
2024-01-22
Federal patch deadline
2024-02-12
Ransomware use
not known

Actors known to use it (MITRE ATT&CK)