virus logo Client Application Firewall



This indicates an attack attempt to exploit a Remote Code Execution in VMware vCenter.
The vulnerability is due to lack of input validation in the Virtual SAN Health Check plug-in. A remote attacker can exploit this to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server..

description-logoOutbreak Alert

VMware’s virtualization management platform, vCenter Server, has a critical severity bug the company is urging customers to patch “as soon as possible”. Admins responsible for vCenter machines that have yet to patch CVE-2021-21985 should install the update immediately if possible.

View the full Outbreak Alert Report

affected-products-logoAffected Products

vCenter Server 6.5
vCenter Server 6.7
vCenter Server 7.0
Cloud Foundation (vCenter Server) 3.x
Cloud Foundation (vCenter Server) 4.x

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Apply the most recent upgrade or patch from the vendor.

Version Updates

Date Version Detail
2022-12-28 22.465 Sig Added
2022-08-15 21.373 Sig Added
2022-02-22 19.263 Sig Added