CVE-2023-34048

CRITICALCISA KEVNuclei

VMware vCenter Server Out-of-Bounds Write Vulnerability

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-34048 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template. CISA lists CVE-2023-34048 in KEV.

Description

vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds write potentially leading to remote code execution.

Description source: CVE List

Exploitation context

Known exploitation

CISA KEV
Listed · Jan 22, 2024 · CISA
VulnCheck KEV
Listed · Jan 17, 2024 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationActive
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 11, 2024 · Source: CVE List

Affected products and versions

4
ProductSourceVersion range

VMware Cloud Foundation (VMware vCenter Server)

Browse VMware / VMware Cloud Foundation (VMware vCenter Server)

Default status: unaffected

CVE List5.xaffected
4.xaffected

VMware vCenter Server

Browse VMware / VMware vCenter Server

Default status: unaffected

CVE List8.0 to < 8.0U2affected
7.0 to < 7.0U3oaffected

vCenter Server

Browse VMware / vCenter Server

Default status: unknown

CISA, CVE List7.0 to < 7.0U3oaffected
8.0 to < 8.0U2affected

cloud_foundation

Browse vmware / cloud_foundation

Default status: unknown

CVE List4.0 to < KB88287affected
5.0 to < KB88287affected

Nuclei templates

1
ProjectDiscoveryCRITICALVMware vCenter Server - Out-of-Bounds WriteCVSS 9.8

vCenter Server contains an out-of-bounds write caused by a vulnerability in the DCERPC protocol implementation. A malicious actor with network access can trigger remote code execution on vCenter Server.

Impact

Unauthenticated attackers with network access can exploit the out-of-bounds write vulnerability in the DCERPC protocol to execute arbitrary code on vCenter Server, potentially compromising the entire VMware virtualization infrastructure.

Remediation

Apply VMware security patches from VMSA-2023-0023 for vCenter Server versions 4.0-5.5 and 7.0-8.0 that fix the DCERPC protocol vulnerability.

WeaknessesCWE-787
Authorsritikchaddha
Template tagscvecve2023vmwarevcenterrcekevvkevpassive
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Shodan: title:"VMware VCenter"
FOFA: title="VMware VCenter"
https://www.vicarius.io/vsociety/posts/understanding-cve-2023-34048-a-zero-day-out-of-bound-write-in-vcenter-server https://www.vmware.com/security/advisories/VMSA-2023-0023.html https://nvd.nist.gov/vuln/detail/CVE-2023-34048

Source: ProjectDiscovery

References

4