← CVE Radar
CVE-2021-21972VMware vCenter Server Remote Code Execution Vulnerability
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server. This affects VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2).
9.8 CRITICALEPSS 99.86%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 10.0 | HIGH | 2.0NVD | AV:N/AC:L/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Nov 17, 2021
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2021-21972
- Status
- Analyzed
- Assigner (CNA)
- vmware
- Published
- Feb 24, 2021
- Last modified
- 2026-08-12 05:17 UTC
Affected Products
As published by the CNA in the CVE record.
VMware vCenter Server3 version ranges
- 7.x before 7.0 U1c
- 6.7 before 6.7 U3l
- 6.5 before 6.5 U3n
VMware Cloud Foundation2 version ranges
- 4.x before 4.2
- 3.x before 3.10.1.2
References
- packetstormsecurity.com http://packetstormsecurity.com/files/161590/VMware-vCenter-Server-7.0-Arbitrary-File-Upload.html
- packetstormsecurity.com http://packetstormsecurity.com/files/161695/VMware-vCenter-Server-File-Upload-Remote-Code-Execution.html
- packetstormsecurity.com http://packetstormsecurity.com/files/163268/VMware-vCenter-6.5-6.7-7.0-Remote-Code-Execution.html
- vmware.com https://www.vmware.com/security/advisories/VMSA-2021-0002.html
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-21972