CVE-2023-20893: The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the DCERPC protocol. A malicious actor with network...
8.1
CVSS
Description
The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may exploit this issue to execute arbitrary code on the underlying operating system that hosts vCenter Server.
Classification
CVE ID: CVE-2023-20893
CVSS Base Severity: HIGH
CVSS Base Score: 8.1
Affected Products
Vendor: VMware
Product: VMware vCenter Server (vCenter Server)
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.34% (probability of being exploited)
EPSS Percentile: 71.25% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)
References
https://www.vmware.com/security/advisories/VMSA-2023-0014.htmlhttps://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1799