CVE-2023-20893

The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the DCERPC protocol

High · published June 22, 2023

CVSS v3.1
8.1
EPSS
1%
Percentile
69.1
In the wild
Unconfirmed
What it is

The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may exploit this issue to execute arbitrary code on the underlying operating system that hosts vCenter Server.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01248 · 69.1th percentile
Published
2023-06-22T11:52Z
EPSS history
Timeline
  • 22 JUN 11:52Z
    The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the DCERPC protocol
    cvelistv5