CVE-2021-21985
Last modified
CVE-2021-21985 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server.. CISA has confirmed active exploitation in the wild. EPSS estimates a 100.00% chance of exploitation in the next 30 days.
Description
The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
100.0th percentile
Probability of exploitation in the next 30 days. Learn more
Exploitation Status
This vulnerability is listed in CISA’s Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. Federal agencies must remediate by .
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Vmware | Vcenter Server | 6.5 |
| Vmware | Vcenter Server | 6.7 |
| Vmware | Vcenter Server | 7.0 |
| Vmware | Cloud Foundation | >= 3.0, < 3.10.2.1 |
| Vmware | Cloud Foundation | >= 4.0, < 4.2.1 |
References
- http://packetstormsecurity.com/files/162812/VMware-Security-Advisory-2021-0010.htmlThird Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/163487/VMware-vCenter-Server-Virtual-SAN-Health-Check-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/162812/VMware-Security-Advisory-2021-0010.htmlThird Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/163487/VMware-vCenter-Server-Virtual-SAN-Health-Check-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-21985US Government Resource
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2021-21985?
How severe is CVE-2021-21985?
How do I fix CVE-2021-21985?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-2198Vulnerability in the Oracle Knowledge Management product of …8.2
- CVE-2021-21980The vSphere Web Client (FLEX/Flash) contains an unauthorized…7.5
- CVE-2021-21981VMware NSX-T contains a privilege escalation vulnerability d…7.8
- CVE-2021-21982VMware Carbon Black Cloud Workload appliance 1.0.0 and 1.01 …9.1
- CVE-2021-21983Arbitrary file write vulnerability in vRealize Operations Ma…6.5
- CVE-2021-21984VMware vRealize Business for Cloud 7.x prior to 7.6.0 contai…9.8
- CVE-2021-21986The vSphere Client (HTML5) contains a vulnerability in a vSp…9.8
- CVE-2021-21987VMware Workstation (16.x prior to 16.1.2) and Horizon Client…6.5
- CVE-2021-21988VMware Workstation (16.x prior to 16.1.2) and Horizon Client…6.5
- CVE-2021-21989VMware Workstation (16.x prior to 16.1.2) and Horizon Client…6.5
- CVE-2021-2199Vulnerability in the Oracle iStore product of Oracle E-Busin…8.2
- CVE-2021-21990VMware Workspace one UEM console (2102 prior to 21.2.0.8, 21…6.1
Are you affected by CVE-2021-21985?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST