CVE-2024-38813
Published 2024-09-17 · Updated 2026-06-17 · Source security@vmware.com
Summary
CVE-2024-38813 is a high-severity (CVSS 7.5) vulnerability in VMware vCenter Server. CISA added it to the Known Exploited Vulnerabilities catalog on November 20, 2024, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by December 11, 2024. CISA does not currently list it as used in ransomware campaigns. VMware has 26 vulnerabilities in the KEV catalog, 9 of them linked to ransomware.
All 26 known-exploited VMware vulnerabilities →Description
The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet.
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA Known-Exploited Vulnerability
Product: VMware — vCenter Server
Name: VMware vCenter Server Privilege Escalation Vulnerability
Date added: 2024-11-20 · Due: 2024-12-11
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.