Feed/CVE-2021-21972
CVE-2021-21972CRITICALCVSS 9.8CISA KEV: Actively Exploited

VMware vCenter Server Remote Code Execution Vulnerability

Published Nov 3, 2021·Updated Aug 12, 2026

NVD Description

VMware vCenter Server vSphere Client contains a remote code execution vulnerability in a vCenter Server plugin which allows an attacker with network access to port 443 to execute commands with unrestricted privileges on the underlying operating system.

Public Exploits & PoCs20 found

[POC] CVE-2021-21972 — CVE-2021-21972

Proof of Concept Exploit for vCenter CVE-2021-21972

33

[POC] CVE-2021-21972 — CVE-2021-21972

CVE-2021-21972 Exploit

33

[POC] CVE-2021-21972 — CVE-2021-21972

Nmap script to check vulnerability CVE-2021-21972

29

[POC] CVE-2021-21972 — CVE-2021-21972

CVE-2021-21972

28

[POC] CVE-2021-21972 — VMware_vCenter_UNAuthorized_RCE_CVE-2021-21972

VMware vCenter 未授权RCE(CVE-2021-21972)

26

[POC] CVE-2021-21972 — CVE-2021-21972

CVE-2021-21972 Unauthorized RCE in VMware vCenter metasploit exploit script

16

[POC] CVE-2021-21972 — vcenter_rce

漏洞利用,Vmware vCenter 6.5-7.0 RCE(CVE-2021-21972),上传冰蝎3,getshell

10

[POC] CVE-2021-21972 — CVE-2021-21972

VMware vCenter Server远程代码执行漏洞 (CVE-2021-21972)批量检测脚本

6

[POC] CVE-2021-21972 — CVE-2021-21972

CVE-2021-21972 – ᴠᴍᴡᴀʀᴇ ᴄʟɪᴇɴᴛ ᴜɴᴀᴜᴛʜᴏʀɪᴢᴇᴅ ᴄᴏᴅᴇ ɪɴᴊᴇᴄᴛɪᴏɴ (ʀᴄᴇ)

6

[POC] CVE-2021-21972 — CVE-2021-21972

CVE-2021-21972 vCenter-6.5-7.0 RCE POC

4

PoC: CVE-2021-21972

[CVE-2021-21972] VMware vSphere Client Unauthorized File Upload to Remote Code Execution (RCE)

4

PoC: CVE-2021-21972

CVE-2021-21972 related vulnerability code

3

PoC: CVE-2021-21972

CVE-2021-21972

2

PoC: VcenterKiller

一款针对Vcenter的综合利用工具,包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22205,提供一键上传webshell,命令执行或者上传公钥使用SSH连接

1

PoC: vSphereyeeter

POC exploit for CVE-2021-21972

1

PoC: westone-CVE-2021-21972-scanner

A vulnerability scanner that detects CVE-2021-21972 vulnerabilities.

1

PoC: CVE-2021-21972

VMware vCenter Server CVE-2021-21972 (RCE) — vulnerability analysis, detection, and mitigation

PoC: CTT-enhanced-VMware-vCenter

Looking at current high-impact vulnerabilities, let's use the VMware vCenter Server CVE-2021-21972 (CVSS 9.8) as our base. This is a publicly known RCE with patches available, perfect for demonstrating CTT enhancements.

PoC: CVE-2021-21972

CVE-2021-21972 vCenter-6.5-7.0 RCE POC

PoC: VMware_vCenter_CVE-2021-21972

VMware vCenter CVE-2021-21972 Tools

Community Discussion

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free