CVE-2023-20894: The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with...
8.1
CVSS
Description
The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bound write by sending a specially crafted packet leading to memory corruption.
Classification
CVE ID: CVE-2023-20894
CVSS Base Severity: HIGH
CVSS Base Score: 8.1
Affected Products
Vendor: VMware
Product: VMware vCenter Server (vCenter Server)
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.24% (probability of being exploited)
EPSS Percentile: 61.73% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)
References
https://www.vmware.com/security/advisories/VMSA-2023-0014.htmlhttps://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1658