VMware Releases Update for Critical vCenter Server Vulnerabilities

VMware has released software updates for a vCenter Server vulnerability that could allow remote code execution from malicious packets.

The vulnerabilities, (CVE-2024-38812, CVE-2024-38813), were considered critical with high CVSS scores.

Versions affected that require an update are:

  • VMware VCenter Server 7.0 and 8.0
  • VMware Cloud Foundation 4.x, 5.x, 5.1.x, and 7.0.

Find update information and downloads on their security advisory notification.