NetSight
high8.1

CVE-2023-20895

The VMware vCenter Server contains a memory corruption vulnerability in the implementation of the DCERPC protocol.

Impact

The VMware vCenter Server contains a memory corruption vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger a memory corruption vulnerability which may bypass authentication.

Affected products

VendorProductAffected versions
VmwareVcenter Server
before 7.0
Versions 7.0, 8.0

Weakness classification

References