CVE-2021-21972CISA KEV: Actively Exploited

VMware vCenter Server Remote Code Execution Vulnerability

Published Nov 3, 2021·Updated Nov 3, 2021

Description

VMware vCenter Server vSphere Client contains a remote code execution vulnerability in a vCenter Server plugin which allows an attacker with network access to port 443 to execute commands with unrestricted privileges on the underlying operating system.

Public Exploits & PoCs19 found

PoC: CVE-2021-21972

CVE-2021-21972 Exploit

369

PoC: CVE-2021-21972

Proof of Concept Exploit for vCenter CVE-2021-21972

189

PoC: CVE-2021-21972

Nmap script to check vulnerability CVE-2021-21972

29

PoC: CVE-2021-21972

CVE-2021-21972

28

PoC: VMware_vCenter_UNAuthorized_RCE_CVE-2021-21972

VMware vCenter 未授权RCE(CVE-2021-21972)

26

PoC: CVE-2021-21972

CVE-2021-21972 Unauthorized RCE in VMware vCenter metasploit exploit script

16

PoC: vcenter_rce

漏洞利用,Vmware vCenter 6.5-7.0 RCE(CVE-2021-21972),上传冰蝎3,getshell

10

PoC: CVE-2021-21972

CVE-2021-21972 – ᴠᴍᴡᴀʀᴇ ᴄʟɪᴇɴᴛ ᴜɴᴀᴜᴛʜᴏʀɪᴢᴇᴅ ᴄᴏᴅᴇ ɪɴᴊᴇᴄᴛɪᴏɴ (ʀᴄᴇ)

6

PoC: CVE-2021-21972

VMware vCenter Server远程代码执行漏洞 (CVE-2021-21972)批量检测脚本

6

PoC: CVE-2021-21972

[CVE-2021-21972] VMware vSphere Client Unauthorized File Upload to Remote Code Execution (RCE)

4

PoC: CVE-2021-21972

CVE-2021-21972 vCenter-6.5-7.0 RCE POC

4

PoC: CVE-2021-21972

CVE-2021-21972 related vulnerability code

3

PoC: CVE-2021-21972

CVE-2021-21972

2

PoC: VcenterKiller

一款针对Vcenter的综合利用工具,包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22205,提供一键上传webshell,命令执行或者上传公钥使用SSH连接

1

PoC: vSphereyeeter

POC exploit for CVE-2021-21972

1

PoC: westone-CVE-2021-21972-scanner

A vulnerability scanner that detects CVE-2021-21972 vulnerabilities.

1

PoC: CTT-enhanced-VMware-vCenter

Looking at current high-impact vulnerabilities, let's use the VMware vCenter Server CVE-2021-21972 (CVSS 9.8) as our base. This is a publicly known RCE with patches available, perfect for demonstrating CTT enhancements.

PoC: CVE-2021-21972

CVE-2021-21972 vCenter-6.5-7.0 RCE POC

PoC: VMware_vCenter_CVE-2021-21972

VMware vCenter CVE-2021-21972 Tools

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free