Page 4 - Sphere Client News Today : Breaking News, Live Updates & Top Stories | Vimarsana

By Juha Saarinen on Feb 25, 2021 11:27AM Patches available for no-authentication vulnerability with proof-of-concept. Administrators are advised to patch their VMware servers as soon as possible, after a proof of concept for a critical remote code execution (RCE) vulnerability that requires no authentication to exploit was released. Positive Technologies security researcher Mikhail Klyuchnikov reported the RCE vulnerability  to VMware in October last year, but kept details of the flaw under wraps. However, a Chinese security vendor, Noah Lab, publish...

Proof-of-concept exploit code has been published online earlier today, and active scans for vulnerable VMware systems have been detected already.

minute read Share this article: The vulnerability, one of three patched by the company this week, could allow threat actors to breach the external perimeter of a data center or leverage backdoors already installed to take over a system. Click to Register VMware has patched three vulnerabilities in its virtual-machine infrastructure for data centers, the most serious of which is a remote code execution (RCE) flaw in its vCenter Server management platform. The vulnerability could allow attackers to breach the external perimeter of an enterprise data center or leverage backdoors alr...