VMware Update
3530Warning Date
Severity Level
Warning Number
Target Sector
24 February, 2021
● Critical
2021-2515
All
Description:
VMware has released a security update to address a vulnerabilities in the following product:
- VMware ESXi
- VMware vCenter Server (vCenter Server)
- VMware Cloud Foundation (Cloud Foundation)
Threats:
An attacker could exploit these vulnerabilities by causing the following:
- Buffer overflow
- Privilege escalation
- Server-side request forgery (SSRF)
- Execute arbitrary code
Best practice and Recommendations:
The CERT team encourages users to review VMware security advisory and apply the necessary update: