CVE-2024-22274 - OpenCVE

The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the underlying operating system.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24308

History

No history.

MITRE

Status: PUBLISHED

Assigner: vmware

Published: 2024-05-21T17:29:33.899Z

Updated: 2024-08-01T22:43:34.161Z

Reserved: 2024-01-08T18:43:18.957Z

Link: CVE-2024-22274

Vulnrichment

Updated: 2024-08-01T22:43:34.161Z

NVD

Status : Awaiting Analysis

Published: 2024-05-21T18:15:09.190

Modified: 2024-07-03T01:47:13.067

Link: CVE-2024-22274

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-22274", "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "state": "PUBLISHED", "assignerShortName": "vmware", "dateReserved": "2024-01-08T18:43:18.957Z", "datePublished": "2024-05-21T17:29:33.899Z", "dateUpdated": "2024-08-01T22:43:34.161Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "VMware vCenter Server", "vendor": "n/a", "versions": [{"lessThan": "8.0 U2b", "status": "affected", "version": "8.0", "versionType": "custom"}, {"lessThan": "7.0 U3q", "status": "affected", "version": "7.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "VMware Cloud Foundation (vCenter Server)", "vendor": "n/a", "versions": [{"lessThan": "5.1.1", "status": "affected", "version": "5.x", "versionType": "custom"}, {"status": "affected", "version": "4.x"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">The vCenter Server contains an authenticated remote code execution vulnerability. </span>A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the underlying operating system.<span style=\"background-color: rgb(255, 255, 255);\"><br><br></span><br>"}], "value": "The vCenter Server contains an authenticated remote code execution vulnerability.\u00a0A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the underlying operating system."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"description": "Authenticated remote-code execution vulnerability", "lang": "en"}]}], "providerMetadata": {"orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "shortName": "vmware", "dateUpdated": "2024-05-21T17:29:33.899Z"}, "references": [{"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24308"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-05-16T00:00:00+00:00", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2024-22274"}}}], "affected": [{"cpes": ["cpe:2.3:a:broadcom:vmware_center_server:8.0:*:*:*:*:*:*:*"], "vendor": "broadcom", "product": "vmware_center_server", "versions": [{"status": "affected", "version": "8.0"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:broadcom:vmware_center_server:7.0:*:*:*:*:*:*:*"], "vendor": "broadcom", "product": "vmware_center_server", "versions": [{"status": "affected", "version": "7.0"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:broadcom:vmware_center_server:5*:*:*:*:*:*:*:*"], "vendor": "broadcom", "product": "vmware_center_server", "versions": [{"status": "affected", "version": "5*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:broadcom:vmware_center_server:4*:*:*:*:*:*:*:*"], "vendor": "broadcom", "product": "vmware_center_server", "versions": [{"status": "affected", "version": "4*"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-94", "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-11T03:55:31.157Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T22:43:34.161Z"}, "title": "CVE Program Container", "references": [{"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24308", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24308", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T22:43:34.161Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-22274", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-05-21T19:03:21.168759Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:broadcom:vmware_center_server:8.0:*:*:*:*:*:*:*"], "vendor": "broadcom", "product": "vmware_center_server", "versions": [{"status": "affected", "version": "8.0"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:broadcom:vmware_center_server:7.0:*:*:*:*:*:*:*"], "vendor": "broadcom", "product": "vmware_center_server", "versions": [{"status": "affected", "version": "7.0"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:broadcom:vmware_center_server:5*:*:*:*:*:*:*:*"], "vendor": "broadcom", "product": "vmware_center_server", "versions": [{"status": "affected", "version": "5*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:broadcom:vmware_center_server:4*:*:*:*:*:*:*:*"], "vendor": "broadcom", "product": "vmware_center_server", "versions": [{"status": "affected", "version": "4*"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-94", "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-21T19:06:24.632Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "n/a", "product": "VMware vCenter Server", "versions": [{"status": "affected", "version": "8.0", "lessThan": "8.0 U2b", "versionType": "custom"}, {"status": "affected", "version": "7.0", "lessThan": "7.0 U3q", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "n/a", "product": "VMware Cloud Foundation (vCenter Server)", "versions": [{"status": "affected", "version": "5.x", "lessThan": "5.1.1", "versionType": "custom"}, {"status": "affected", "version": "4.x"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24308"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "The vCenter Server contains an authenticated remote code execution vulnerability.\u00a0A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the underlying operating system.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">The vCenter Server contains an authenticated remote code execution vulnerability. </span>A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the underlying operating system.<span style=\"background-color: rgb(255, 255, 255);\"><br><br></span><br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Authenticated remote-code execution vulnerability"}]}], "providerMetadata": {"orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "shortName": "vmware", "dateUpdated": "2024-05-21T17:29:33.899Z"}}}, "cveMetadata": {"cveId": "CVE-2024-22274", "state": "PUBLISHED", "dateUpdated": "2024-08-01T22:43:34.161Z", "dateReserved": "2024-01-08T18:43:18.957Z", "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "datePublished": "2024-05-21T17:29:33.899Z", "assignerShortName": "vmware"}, "dataVersion": "5.1"}