CVE-2024-37081

The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may exploit these issues to elevate privileges to root on vCenter Server Appliance.

Affected

VMware vCenter Server · VMware Cloud Foundation

CVSS v3.1 VMWARE

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

4.99% chance of exploitation in the next 30 days, 92nd percentile

Published

2024-06-18

Updated

2024-08-02

Proof-of-concept exploits (3)

• CERTologists/Modified-CVE-2024-37081-POC0★ · 2024-07-21
• Mr-r00t11/CVE-2024-3708159★ · 2024-07-09
• mbadanoiu/CVE-2024-3708110★ · 2024-07-06

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vcenter_sudo_lpe.rb

Security advisories

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/Secu…

References

• CVE Record
• NVD entry

Related

• CVE-2023-41892
• CVE-2024-27956
• CVE-2024-36877
• CVE-2024-23692
• CVE-2024-34470
• CVE-2024-34693