CVE-2021-22014

Published: Sep 23, 2021Modified: Jun 17, 2026

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

The vCenter Server contains an authenticated code execution vulnerability in VAMI (Virtual Appliance Management Infrastructure). An authenticated VAMI user with network access to port 5480 on vCenter Server may exploit this issue to execute code on the underlying operating system that hosts vCenter Server.

Affected (4)

Products: Vmware: Cloud Foundation, Vcenter Server

2 products

Cloud Foundation

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Vmware Cloud Foundation	From 3.0 to 5.0
Vmware Vcenter Server	Version 6.5
Vmware Vcenter Server	Version 6.7
Vmware Vcenter Server	Version 7.0

References (2)

https://www.vmware.com/security/advisories/VMSA-2021-0020.html

Source: security@vmware.com

PatchVendor Advisory

https://www.vmware.com/security/advisories/VMSA-2021-0020.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.