PT-2021-2131 · Vmware · Vsphere Client+3

Mikhail Klyuchnikov · Published 2021-02-23 · Updated 2026-02-15 · CVE-2021-21972

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions 6.5 before 6.5 U3n VMware vCenter Server versions 6.7 before 6.7 U3l VMware vCenter Server versions 7.x before 7.0 U1c VMware Cloud Foundation versions 3.x before 3.10.1.2 VMware Cloud Foundation versions 4.x before 4.2

Description The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server. This vulnerability is related to insufficient input validation.

Recommendations For VMware vCenter Server version 6.5, update to version 6.5 U3n or later. For VMware vCenter Server version 6.7, update to version 6.7 U3l or later. For VMware vCenter Server version 7.x, update to version 7.0 U1c or later. For VMware Cloud Foundation version 3.x, update to version 3.10.1.2 or later. For VMware Cloud Foundation version 4.x, update to version 4.2 or later. As a temporary workaround, consider restricting access to the vSphere Client (HTML5) until a patch is available.

Exploit

Fix

RCE

Path traversal

Weakness Enumeration

CWE-22

CWE-20

Related Identifiers

BDU:2021-00990

CVE-2021-21972

VMWAREVCENTERCVE_2021_21972

Affected Products

Vmware Vcenter

Vmware Cloud Foundation

Vmware Vcenter Server

Vsphere Client

References · 95

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/vmware_vcenter_uploadova_rce.rb · Exploit
• 🔥 https://github.com/Schira4396/VcenterKiller · Exploit
• 🔥 https://github.com/NS-Sp4ce/CVE-2021-21972 · Exploit
• 🔥 https://github.com/horizon3ai/CVE-2021-21972 · Exploit
• 🔥 https://github.com/QmF0c3UK/CVE-2021-21972-vCenter-6.5-7.0-RCE-POC · Exploit
• 🔥 https://github.com/psc4re/NSE-scripts · Exploit
• 🔥 https://github.com/alt3kx/CVE-2021-21972 · Exploit
• 🔥 https://github.com/milo2012/CVE-2021-21972 · Exploit
• 🔥 https://github.com/conjojo/VMware_vCenter_UNAuthorized_RCE_CVE-2021-21972 · Exploit
• 🔥 https://github.com/GuayoyoCyber/CVE-2021-21972 · Exploit
• 🔥 https://github.com/TaroballzChen/CVE-2021-21972 · Exploit
• 🔥 https://github.com/B1anda0/CVE-2021-21972 · Exploit
• 🔥 https://github.com/Ma1Dong/vcenter_rce · Exploit
• 🔥 https://github.com/orangmuda/CVE-2021-21972 · Exploit
• 🔥 https://github.com/onsecuredev/CVE-2021-21972 · Exploit