CVE-2024-22274: Code Injection
The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-22274?
CVE-2024-22274 is classified as an authenticated remote code execution vulnerability.
Who can exploit CVE-2024-22274?
Only malicious actors with administrative privileges on the vCenter appliance shell can exploit CVE-2024-22274.
What are the potential consequences of exploiting CVE-2024-22274?
Exploiting CVE-2024-22274 may allow attackers to run arbitrary commands on the underlying operating system.
How do I fix CVE-2024-22274?
To fix CVE-2024-22274, apply the latest security patches provided by VMware for the affected vCenter Server versions.
Which versions of VMware vCenter Server are affected by CVE-2024-22274?
CVE-2024-22274 affects specific versions of VMware vCenter Server 7.0 and 8.0, as well as VMware Cloud Foundation.