这是我见到的最为严重的漏洞，黑客可以利用漏洞绕过认证(Bypass Authentication)入侵esxi，详细官方链接：
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505
目前没有补丁，只有Workrounds
| VMware Product | Version | Running On | CVE | CVSSv3 | Severity | Fixed Version | Workarounds | Additional Documentation |
| ESXi | 8.0 | Any | CVE-2024-37085 | 6.8 | Moderate | ESXi80U3-24022510 | KB369707 | None |
| ESXi | 7.0 | Any | CVE-2024-37085 | 6.8 | Moderate | No Patch Planned | KB369707 | None |
| VMware Cloud Foundation | 5.x | Any | CVE-2024-37085 | 6.8 | Moderate | Patch Pending | KB369707 | None |
| VMware Cloud Foundation | 4.x | Any | CVE-2024-37085 | 6.8 | Moderate | No Patch Planned | KB369707 | None |
我已经在电报群中见到了勒索的案例：
如果您觉得有用，请点赞，分享和关注；合作联系电话：13503069419，加微信，请注明vExpert。
原文始发于微信公众号（vExpert）：安全警告VMSA-2024-0013
- 左青龙
- 微信扫一扫
-
- 右白虎
- 微信扫一扫
-
评论