← CVE Radar
CVE-2024-37085VMware ESXi Authentication Bypass Vulnerability
VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management https://blogs.vmware.com/vsphere/2012/09/joining-vsphere-hosts-to-active-directory.html by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.
7.2 HIGHEPSS 26.77%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.2 | HIGH | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| 6.8 | MEDIUM | 3.1vmware (CNA) | CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H |
CISA required action
⚡ Known exploited · remediation due Aug 20, 2024
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Details
- CVE ID
- CVE-2024-37085
- Status
- Analyzed
- Assigner (CNA)
- vmware
- Published
- Jun 25, 2024
- Last modified
- 2026-06-17 07:37 UTC
Affected Products
As published by the CNA in the CVE record.
VMware ESXi2 version ranges
- 8.0 before ESXi80U3-24022510
- 7.0
VMware Cloud Foundation2 version ranges
- 5.x
- 4.x