VMware vCenter server versions 6.5, 6.7, and 7.0 unauthenticated remote code execution exploit.
94e41c511d5d15a622ec6d606fa4269ad0be5284a51e1ba728f5e6e62b910b67This Metasploit module exploits an unauthenticated OVA file upload and path traversal in VMware vCenter Server to write a JSP payload to a web-accessible directory. Fixed versions are 6.5 Update 3n, 6.7 Update 3l, and 7.0 Update 1c. Note that later vulnerable versions of the Linux appliance aren't exploitable via the webshell technique. Furthermore, writing an SSH public key to /home/vsphere-ui/.ssh/authorized_keys works, but the user's non-existent password expires 90 days after install, rendering the technique nearly useless against production environments. You'll have the best luck targeting older versions of the Linux appliance. The Windows target should work ubiquitously.
ee1f708da8c9cdb296637b11bf11d0e1c52209633c21780eca035b11e77bfd1dVMware vCenter Server version 7.0 unauthenticated arbitrary file upload exploit.
799c1c46954c9683e557c8e1a417d133206fb6622b8109abd3fd919820dc39a2VMware vCenter version 6.5 and 7.0 remote code execution proof of concept exploit.
9c96c0db7f03de2a504caab808f8c52d5539b617a600a774abb1b8abb139a92b
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed