CVE-2023-20895: The VMware vCenter Server contains a memory corruption vulnerability in the implementation of the DCERPC protocol. A malicious actor with...
8.1
CVSS
Description
The VMware vCenter Server contains a memory corruption vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger a memory corruption vulnerability which may bypass authentication.
Classification
CVE ID: CVE-2023-20895
CVSS Base Severity: HIGH
CVSS Base Score: 8.1
Affected Products
Vendor: VMware
Product: VMware vCenter Server (vCenter Server)
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.2% (probability of being exploited)
EPSS Percentile: 58.2% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)
References
https://www.vmware.com/security/advisories/VMSA-2023-0014.htmlhttps://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1740