Description
Broadcom VMware Aria Operations formerly known as vRealize Operations (vROps) contains a command injection vulnerability that allows an unauthenticated attacker to execute arbitrary commands, potentially leading to remote code execution during support‑assisted product migration.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| VMware Aria Operations | VMware / VMware Aria Operations | >= 8.18.x, < 8.18.6 | affected |
| VMware Cloud Foundation Operations | VMware / VMware Cloud Foundation Operations | >= 4.0, < 5.2.3 | affected |
| VMware Cloud Foundation Operations | VMware / VMware Cloud Foundation Operations | 5.2.3 | unaffected |
| VMware Cloud Foundation Operations | VMware / VMware Cloud Foundation Operations | >= 9.0, < 9.0.2 | affected |
| VMware Cloud Foundation Operations | VMware / VMware Cloud Foundation Operations | 9.0.2 | unaffected |
| vmware-telco-cloud-infrastructure | VMware / Telco Cloud Infrastructure | >= 2.0, < 5.2.3 | affected |
| vmware-telco-cloud-infrastructure | VMware / Telco Cloud Infrastructure | 5.2.3 | unaffected |
| vmware-telco-cloud-platform | VMware / Telco Cloud Platform | >= 2.0, < 5.2.3 | affected |
| vmware-telco-cloud-platform | VMware / Telco Cloud Platform | 5.2.3 | unaffected |