Description
VMware vCenter Server vSphere Client contains a remote code execution vulnerability in a vCenter Server plugin which allows an attacker with network access to port 443 to execute commands with unrestricted privileges on the underlying operating system.
NVD enrichment (full description, CVSS vector, CWEs) has not completed for this CVE yet — shown above is the CISA KEV short description only.
Scoring
- CVSS: Not yet available
- EPSS exploitation probability: Not yet available
- EPSS percentile: Not yet available
CISA KEV status
- Added to KEV: 2021-11-03
- Remediation due date: 2021-11-17
- Known ransomware campaign use: Known
More from VMware
- CVE-2025-22226 — ESXi, Workstation, and Fusion
- CVE-2025-22224 — ESXi and Workstation
- CVE-2025-22225 — ESXi
- CVE-2024-38813 — vCenter Server
- CVE-2024-38812 — vCenter Server