Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2021-21972

Quick assessment

Affected

n/a VMware vCenter Server

Exploitation

Confirmed exploitation in the wild; remediate immediately

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

VMware vSphere Client是美国威睿（VMware）公司的一个应用软件。提供虚拟化管理。 VMware vSphere Client存在路径遍历漏洞，未授权的攻击者可以通过开放443端口的服务器向vCenter Server发送精心构造的请求，从而在目标系统上远程执行恶意代码。以下产品和版本受到影响：vSphere Client 6.5、vSphere Client 6.7、vSphere Client 7.0、VMware Cloud Foundation（vCenter Server）

AI Predicted 9.8 Difficulty: Moderate KEV · Ransomware EPSS 99.87% · P100 Updated Aug 12, 2026

Public Exploits 4

ExploitDB · 2 EDB-50056 [webapps] EDB-49602 [webapps]

Metasploit · 1 vmware_vcenter_uploadova_rce.rb [exploit]

Nuclei · 1 CVE-2021-21972.yaml [template]

In-the-Wild Activity Observed cisa_kev · confirmed

Possible ATT&CK Techniques 2 AI

T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application

Affected Version Matrix 5

Vendor	Product	Version Range	Status
n/a	VMware Cloud Foundation	`4.x before 4.2`	affected
		`3.x before 3.10.1.2`	affected
n/a	VMware vCenter Server	`7.x before 7.0 U1c`	affected
		`6.7 before 6.7 U3l`	affected
		`6.5 before 6.5 U3n`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2021-21972

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server. This affects VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2).

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

VMware vSphere Client 路径遍历漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	VMware vCenter Server	7.x before 7.0 U1c	-
-	VMware Cloud Foundation	4.x before 4.2	-

II. Public POCs for CVE-2021-21972

#	POC Description	Source Link	Shenlong Link
1	NSE scripts to detect CVE-2020-1350 SIGRED and CVE-2020-0796 SMBGHOST, CVE-2021-21972, proxyshell, CVE-2021-34473	https://github.com/psc4re/NSE-scripts	POC Details
2	None	https://github.com/QmF0c3UK/CVE-2021-21972-vCenter-6.5-7.0-RCE-POC	POC Details
3	CVE-2021-21972 Exploit	https://github.com/NS-Sp4ce/CVE-2021-21972	POC Details
4	None	https://github.com/yaunsky/CVE-2021-21972	POC Details
5	Proof of Concept Exploit for vCenter CVE-2021-21972	https://github.com/horizon3ai/CVE-2021-21972	POC Details
6	A vulnerability scanner that detects CVE-2021-21972 vulnerabilities.	https://github.com/Osyanina/westone-CVE-2021-21972-scanner	POC Details
7	None	https://github.com/alt3kx/CVE-2021-21972	POC Details
8	CVE-2021-21972	https://github.com/milo2012/CVE-2021-21972	POC Details
9	CVE-2021-21972 vCenter-6.5-7.0 RCE POC	https://github.com/Udyz/CVE-2021-21972	POC Details
10	VMware vCenter 未授权RCE（CVE-2021-21972）	https://github.com/conjojo/VMware_vCenter_UNAuthorized_RCE_CVE-2021-21972	POC Details
11	None	https://github.com/L-pin/CVE-2021-21972	POC Details
12	VMware vCenter Server远程代码执行漏洞 (CVE-2021-21972)批量检测脚本	https://github.com/B1anda0/CVE-2021-21972	POC Details
13	CVE-2021-21972	https://github.com/renini/CVE-2021-21972	POC Details
14	None	https://github.com/stevenp322/cve-2021-21972	POC Details
15	Nmap script to check vulnerability CVE-2021-21972	https://github.com/GuayoyoCyber/CVE-2021-21972	POC Details
16	None	https://github.com/JMousqueton/Detect-CVE-2021-21972	POC Details
17	VMware vCenter CVE-2021-21972 Tools	https://github.com/robwillisinfo/VMware_vCenter_CVE-2021-21972	POC Details
18	漏洞利用，Vmware vCenter 6.5-7.0 RCE（CVE-2021-21972），上传冰蝎3，getshell	https://github.com/Ma1Dong/vcenter_rce	POC Details
19	None	https://github.com/d3sh1n/cve-2021-21972	POC Details
20	CVE-2021-21972 related vulnerability code	https://github.com/ByZain/CVE-2021-21972	POC Details
21	CVE-2021-21972 Unauthorized RCE in VMware vCenter metasploit exploit script	https://github.com/TaroballzChen/CVE-2021-21972	POC Details
22	None	https://github.com/password520/CVE-2021-21972	POC Details
23	[CVE-2021-21972] VMware vSphere Client Unauthorized File Upload to Remote Code Execution (RCE)	https://github.com/murataydemir/CVE-2021-21972	POC Details
24	POC exploit for CVE-2021-21972	https://github.com/pettyhacks/vSphereyeeter	POC Details
25	None	https://github.com/haiclover/CVE-2021-21972	POC Details
26	CVE-2021-21972 – ᴠᴍᴡᴀʀᴇ ᴄʟɪᴇɴᴛ ᴜɴᴀᴜᴛʜᴏʀɪᴢᴇᴅ ᴄᴏᴅᴇ ɪɴᴊᴇᴄᴛɪᴏɴ (ʀᴄᴇ)	https://github.com/orangmuda/CVE-2021-21972	POC Details
27	None	https://github.com/user16-et/cve-2021-21972_PoC	POC Details
28	None	https://github.com/haidv35/CVE-2021-21972	POC Details
29	None	https://github.com/ZTK-009/CVE-2021-21972	POC Details
30	CVE-2021-21972 vCenter-6.5-7.0 RCE POC	https://github.com/TAI-REx/CVE-2021-21972	POC Details

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2021-21972

请登录查看更多情报信息。

Vendor Advisories for CVE-2021-21972 (1)

https://www.vmware.com/security/advisories/VMSA-2021-0002.html x_refsource_CONFIRM

Exploits & Public PoCs for CVE-2021-21972 (3)

http://packetstormsecurity.com/files/161590/VMware-vCenter-Server-7.0-Arbitrary-File-Upload.html x_refsource_MISC
http://packetstormsecurity.com/files/161695/VMware-vCenter-Server-File-Upload-Remote-Code-Execution.html x_refsource_MISC
http://packetstormsecurity.com/files/163268/VMware-vCenter-6.5-6.7-7.0-Remote-Code-Execution.html x_refsource_MISC

https://www.cve.org/CVERecord?id=CVE-2021-21972

Same Patch Batch · n/a · 2021-02-24 · 10 CVEs total

CVE-2020-11987		Apache Batik 代码问题漏洞
CVE-2021-27645		GNU C Library和glibc 资源管理错误漏洞
CVE-2020-12702		eWeLink mobile application 加密问题漏洞
CVE-2021-3355		LightCMS v跨站脚本漏洞
CVE-2020-28599		Torsten Paul Openscad 缓冲区错误漏洞
CVE-2021-22667		Advantech BB-ESWGP506-2SFP-T 信任管理问题漏洞
CVE-2021-21973		VMware vCenter Server 代码问题漏洞
CVE-2021-21974		威睿 VMware ESXi 缓冲区错误漏洞
CVE-2020-11988		Apache XmlGraphics Commons 代码问题漏洞

IV. Related Vulnerabilities

Same product: VMware vCenter Server

Same vendor: n/a

V. Comments for CVE-2021-21972

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2021-21972

Quick assessment

Public Exploits 4

Possible ATT&CK Techniques 2 AI

Affected Version Matrix 5

I. Basic Information for CVE-2021-21972

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Shenlong Deep Dive — AI Deep Analysis

Affected Products

II. Public POCs for CVE-2021-21972

III. Intelligence Information for CVE-2021-21972

Vendor Advisories for CVE-2021-21972 (1)

Exploits & Public PoCs for CVE-2021-21972 (3)

Same Patch Batch · n/a · 2021-02-24 · 10 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2021-21972

Leave a comment