CVE-2024-38812

CriticalCVSS 9.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122 CWE-787

Affected software

Vendor	Product	Versions
n/a	VMware vCenter Server	>= 8.0, < 8.0 U3b; >= 7.0, < 7.0 U3s
n/a	VMware Cloud Foundation	5.x; 4.x
broadcom	vmware_vcenter_server	>= 8.00, < 8.0u3b; >= 7.0, < 7.0u3s
broadcom	vmware_vcenter_server	>= 8.00, < 8.0u3b; >= 7.0, < 7.0u3s
broadcom	vmware_cloud_foundation	>= 4.0, < 5.0; >= 5.0, < 6.0
broadcom	vmware_cloud_foundation	>= 4.0, < 5.0; >= 5.0, < 6.0

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38812US Government Resource

Timeline

Published: Sep 17, 2024
Last modified: Jun 17, 2026
Added to CISA KEV: Nov 20, 2024
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-388139.8The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this v CVE-2024-388148.8An authenticated SQL injection vulnerability in VMware HCX was privately reported to VMware. A malicious authenticated user with non-admini CVE-2024-388154.3VMware NSX contains a content spoofing vulnerability. An unauthenticated malicious actor may be able to craft a URL and redirect a victim CVE-2024-388167.5Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks CVE-2024-388176.7VMware NSX contains a command injection vulnerability. A malicious actor with access to the NSX Edge CLI terminal may be able to craft mal CVE-2024-388186.7VMware NSX contains a local privilege escalation vulnerability. An authenticated malicious actor may exploit this vulnerability to obtain CVE-2024-388197.5Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks CVE-2024-38828.8A vulnerability was found in Tenda W30E 1.0.1.25(633). It has been classified as critical. Affected is the function fromRouteStatic of the f CVE-2024-388205.3The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale depe CVE-2024-388219.1Spring WebFlux applications that have Spring Security authorization rules on static resources can be bypassed under certain circumstances. CVE-2024-388222.7Multiple methods in the salt master skip minion token validation. Therefore a misbehaving minion can impersonate another minion.CVE-2024-388232.7Salt's request server is vulnerable to replay attacks when not using a TLS encrypted transport.