CVE-2022-31680: Critical severity vmware vcenter vulnerability
The vCenter Server contains an unsafe deserialisation vulnerability in the PSC (Platform services controller). A malicious actor with admin access on vCenter server may exploit this issue to execute arbitrary code on the underlying operating system that hosts the vCenter Server.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-31680?
CVE-2022-31680 is a vulnerability in VMware vCenter Server that allows a malicious actor with admin access to execute arbitrary code on the underlying operating system.
How severe is CVE-2022-31680?
CVE-2022-31680 has a severity rating of 9.1 out of 10, which is considered critical.
What software is affected by CVE-2022-31680?
VMware vCenter Server versions 6.5 and below are affected by CVE-2022-31680.
How can CVE-2022-31680 be exploited?
CVE-2022-31680 can be exploited by a malicious actor with admin access on vCenter Server to perform remote code execution on the underlying operating system.
Where can I find more information about CVE-2022-31680?
You can find more information about CVE-2022-31680 on Talos Intelligence and VMware's security advisories.