No detailed analysis has been written for this CVE yet.
The KEYDAL team will publish a comprehensive analysis of this vulnerability soon.
CVE-2021-22005
VMware vCenter File Upload RCE — Frequently used by ransomware groups for ESXi.
Vulnerability Profile
CVSS Score
9.8 / 10.0
Severity
Critical
Exploitation Status
⚠ Active Exploitation
Patch Status
✓ Patch Available
Affected Software
VMware vCenter Server 6.5-7.0
Exploitation Method
File upload to RCE
MITRE ATT&CK
T1190