CVE-2015-2342

VMware vCenter Server <6.0 - RCE

Title source: llm

Description

The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol.

Exploits (3)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotejava
https://www.exploit-db.com/exploits/36101
metasploit SCANNER
by rocktheboat · rubypocjava
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/misc/java_jmx_server.rb
metasploit WORKING POC EXCELLENT
by Braden Thomas, juan vazquez · rubypocjava
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/java_jmx_server.rb

Scores

EPSS 0.9203
EPSS Percentile 99.7%

Details

Status published
Products (4)
vmware/vcenter_server 5.0
vmware/vcenter_server 5.1
vmware/vcenter_server 5.5
vmware/vcenter_server 6.0
Published Oct 12, 2015
Tracked Since Feb 18, 2026