Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-21972
Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server. This affects VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2).
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
VMware vSphere Client 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
VMware vSphere Client是美国威睿(VMware)公司的一个应用软件。提供虚拟化管理。 VMware vSphere Client存在路径遍历漏洞,未授权的攻击者可以通过开放443端口的服务器向vCenter Server发送精心构造的请求,从而在目标系统上远程执行恶意代码。以下产品和版本受到影响:vSphere Client 6.5、vSphere Client 6.7、vSphere Client 7.0、VMware Cloud Foundation(vCenter Server)
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
-VMware vCenter Server 7.x before 7.0 U1c -
-VMware Cloud Foundation 4.x before 4.2 -
II. Public POCs for CVE-2021-21972
#POC DescriptionSource LinkShenlong Link
1NSE scripts to detect CVE-2020-1350 SIGRED and CVE-2020-0796 SMBGHOST, CVE-2021-21972, proxyshell, CVE-2021-34473https://github.com/psc4re/NSE-scriptsPOC Details
2Nonehttps://github.com/QmF0c3UK/CVE-2021-21972-vCenter-6.5-7.0-RCE-POCPOC Details
3CVE-2021-21972 Exploithttps://github.com/NS-Sp4ce/CVE-2021-21972POC Details
4Nonehttps://github.com/yaunsky/CVE-2021-21972POC Details
5Proof of Concept Exploit for vCenter CVE-2021-21972https://github.com/horizon3ai/CVE-2021-21972POC Details
6A vulnerability scanner that detects CVE-2021-21972 vulnerabilities.https://github.com/Osyanina/westone-CVE-2021-21972-scannerPOC Details
7Nonehttps://github.com/alt3kx/CVE-2021-21972POC Details
8CVE-2021-21972https://github.com/milo2012/CVE-2021-21972POC Details
9CVE-2021-21972 vCenter-6.5-7.0 RCE POChttps://github.com/Udyz/CVE-2021-21972POC Details
10VMware vCenter 未授权RCE(CVE-2021-21972)https://github.com/conjojo/VMware_vCenter_UNAuthorized_RCE_CVE-2021-21972POC Details
11Nonehttps://github.com/L-pin/CVE-2021-21972POC Details
12VMware vCenter Server远程代码执行漏洞 (CVE-2021-21972)批量检测脚本https://github.com/B1anda0/CVE-2021-21972POC Details
13CVE-2021-21972https://github.com/renini/CVE-2021-21972POC Details
14Nonehttps://github.com/stevenp322/cve-2021-21972POC Details
15Nmap script to check vulnerability CVE-2021-21972https://github.com/GuayoyoCyber/CVE-2021-21972POC Details
16Nonehttps://github.com/JMousqueton/Detect-CVE-2021-21972POC Details
17VMware vCenter CVE-2021-21972 Toolshttps://github.com/robwillisinfo/VMware_vCenter_CVE-2021-21972POC Details
18漏洞利用,Vmware vCenter 6.5-7.0 RCE(CVE-2021-21972),上传冰蝎3,getshellhttps://github.com/Ma1Dong/vcenter_rcePOC Details
19Nonehttps://github.com/d3sh1n/cve-2021-21972POC Details
20CVE-2021-21972 related vulnerability codehttps://github.com/ByZain/CVE-2021-21972POC Details
21CVE-2021-21972 Unauthorized RCE in VMware vCenter metasploit exploit scripthttps://github.com/TaroballzChen/CVE-2021-21972POC Details
22Nonehttps://github.com/password520/CVE-2021-21972POC Details
23[CVE-2021-21972] VMware vSphere Client Unauthorized File Upload to Remote Code Execution (RCE)https://github.com/murataydemir/CVE-2021-21972POC Details
24POC exploit for CVE-2021-21972https://github.com/pettyhacks/vSphereyeeterPOC Details
25Nonehttps://github.com/haiclover/CVE-2021-21972POC Details
26CVE-2021-21972 – ᴠᴍᴡᴀʀᴇ ᴄʟɪᴇɴᴛ ᴜɴᴀᴜᴛʜᴏʀɪᴢᴇᴅ ᴄᴏᴅᴇ ɪɴᴊᴇᴄᴛɪᴏɴ (ʀᴄᴇ)https://github.com/orangmuda/CVE-2021-21972POC Details
27Nonehttps://github.com/user16-et/cve-2021-21972_PoCPOC Details
28Nonehttps://github.com/haidv35/CVE-2021-21972POC Details
29Nonehttps://github.com/ZTK-009/CVE-2021-21972POC Details
30CVE-2021-21972 vCenter-6.5-7.0 RCE POChttps://github.com/TAI-REx/CVE-2021-21972POC Details
31VMware vCenter vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server. This affects VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2).https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21972.yamlPOC Details
32Nonehttps://github.com/Threekiii/Awesome-POC/blob/master/%E4%BA%91%E5%AE%89%E5%85%A8%E6%BC%8F%E6%B4%9E/VMware%20vCenter%20Server%20%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%20CVE-2021-21972.mdPOC Details
33Looking at current high-impact vulnerabilities, let's use the VMware vCenter Server CVE-2021-21972 (CVSS 9.8) as our base. This is a publicly known RCE with patches available, perfect for demonstrating CTT enhancements.https://github.com/SimoesCTT/CTT-enhanced-VMware-vCenterPOC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2021-21972
Please Login to view more intelligence information
IV. Related Vulnerabilities
V. Comments for CVE-2021-21972

No comments yet


Leave a comment