Browse / CVEs / CVE-2024-37085
CVE-2024-37085· vmware / esxi· CWE-305
VMware ESXi Authentication Bypass Vulnerability
Exploited in the wild. Listed by CISA on 2024-07-30; known to be used by ransomware.
26.8%likelihood of exploitation, next 30 days
98%of all CVEs are less likely
Nonecheck to confirm it
VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.
No ready check is stored for this CVE. Confirm it by hand from the references.
References
Use this check only on systems you are authorised to test. Where the data comes from