CVE-2023-20896: The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of the DCERPC protocol. A malicious actor with...
5.9
CVSS
Description
The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds read by sending a specially crafted packet leading to denial-of-service of certain services (vmcad, vmdird, and vmafdd).
Classification
CVE ID: CVE-2023-20896
CVSS Base Severity: MEDIUM
CVSS Base Score: 5.9
Affected Products
Vendor: VMware
Product: VMware vCenter Server (vCenter Server)
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.07% (probability of being exploited)
EPSS Percentile: 33.57% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)
References
https://www.vmware.com/security/advisories/VMSA-2023-0014.htmlhttps://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1800