← Back

CVE-2013-1405

nvd nist
Published: Feb 15, 2013Modified: Apr 29, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0 before Update 4b and 4.1 before Update 3a, VMware VI-Client 2.5, VMware ESXi 3.5 through 4.1, and VMware ESX 3.5 through 4.1 do not properly implement the management authentication protocol, which allow remote servers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Affected (20)

Vmware
6 products
Vcenter Server
Virtualcenter
Vsphere Client
Vi Client
Esxi
Esx
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Vcenter Server
Version 4.0 update_4
Vcenter Server
Version 4.1 update_3
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Virtualcenter
Version 2.5
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Vsphere Client
Version 4.0 update_4
Vsphere Client
Version 4.1 update_3
Configuration D
1 vulnerable
Vulnerable SoftwareAffected Versions
Vi Client
Version 2.5
Configuration E
8 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Esxi
Version 3.5
Esxi
Version 3.5 1
Esxi
Version 4.0
Esxi
Version 4.0 1
Esxi
Version 4.0 2
Esxi
Version 4.0 3
Esxi
Version 4.0 4
Esxi
Version 4.1
Configuration F
6 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Esx
Version 3.5
Esx
Version 3.5 update1
Esx
Version 3.5 update2
Esx
Version 3.5 update3
Esx
Version 4.0
Esx
Version 4.1

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.