CVE-2021-22010: High severity vmware vcenter server and cloud foundation vulnerability
The vCenter Server contains a denial-of-service vulnerability in VPXD service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to create a denial of service condition due to excessive memory consumption by VPXD service.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID of this vCenter Server vulnerability?
The vulnerability ID of this vCenter Server vulnerability is CVE-2021-22010.
What is the severity level of CVE-2021-22010?
The severity level of CVE-2021-22010 is high with a value of 7.5.
How can a malicious actor exploit CVE-2021-22010?
A malicious actor with network access to port 443 on vCenter Server can exploit CVE-2021-22010 to create a denial of service condition due to excessive memory consumption by VPXD service.
Which versions of VMware vCenter Server are affected by CVE-2021-22010?
VMware vCenter Server 6.7 and VMware vCenter Server 7.0 are affected by CVE-2021-22010.
Where can I find more information about CVE-2021-22010?
You can find more information about CVE-2021-22010 at the following link: [VMware Security Advisory VMSA-2021-0020](https://www.vmware.com/security/advisories/VMSA-2021-0020.html)