- Vendor / Project
- VMware
- Product
- ESXi
- Date added
- Nov 3, 2021
- Due date
- May 3, 2022
- Known ransomware use
- Known
- CWEs
- CWE-416
Description
VMware ESXi OpenSLP contains a use-after-free vulnerability that allows an attacker residing in the management network with access to port 427 to perform remote code execution.
Required action
Apply updates per vendor instructions.