CVE-2021-22014

The vCenter Server contains an authenticated code execution vulnerability in VAMI (Virtual Appliance Management Infrastructure)

published September 23, 2021

CVSS
—
EPSS
2%
Percentile
74.4
In the wild
Unconfirmed
What it is

The vCenter Server contains an authenticated code execution vulnerability in VAMI (Virtual Appliance Management Infrastructure). An authenticated VAMI user with network access to port 5480 on vCenter Server may exploit this issue to execute code on the underlying operating system that hosts vCenter Server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01522 · 74.4th percentile
Published
2021-09-23T11:59Z
EPSS history
Timeline
  • 23 SEP 11:59Z
    The vCenter Server contains an authenticated code execution vulnerability in VAMI (Virtual Appliance Management Infrastructure)
    cvelistv5