CVE-2021-21985 Scanner

VMware vCenter Server is a powerful tool used for managing virtualization infrastructure. It allows administrators to manage virtual machines, storage, and networking across multiple hosts and data centers. VMware Cloud Foundation, on the other hand, is a comprehensive software-defined data center platform that bundles vSphere, vSAN, and NSX into a single solution. It simplifies the deployment and management of the entire stack by providing a unified user interface and automated lifecycle management. 

A critical vulnerability has been discovered in VMware vCenter Server, identified as CVE-2021-21985, which puts organizations at risk of remote code execution attacks. The vulnerability exists due to the lack of input validation in the Virtual SAN Health Check plug-in, which is enabled by default in vCenter Server. Attackers with network access to port 443 can exploit this vulnerability to execute arbitrary commands with elevated privileges on the underlying operating system that hosts vCenter Server.

This vulnerability can lead to complete compromise of vCenter Server and the virtualization infrastructure it manages. Attackers can execute malicious code, steal sensitive data, or disrupt business operations by causing system outages. The consequences can be severe, ranging from reputational damage to financial losses and regulatory fines.

Thanks to the pro features of the securityforeveryone.com platform, organizations can easily and quickly learn about vulnerabilities in their digital assets. The platform provides comprehensive vulnerability scanning and management capabilities, including automated discovery, assessment, and remediation of vulnerabilities. It also offers real-time alerts, reports, and dashboards to help organizations stay on top of their security posture and compliance requirements. With securityforeveryone.com, organizations can proactively identify and mitigate vulnerabilities before they are exploited by attackers.

REFERENCES

• http://packetstormsecurity.com/files/162812/VMware-Security-Advisory-2021-0010.html
• https://www.vmware.com/security/advisories/VMSA-2021-0010.html