CVE-2022-31680

Severity Score

9.1

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The vCenter Server contains an unsafe deserialisation vulnerability in the PSC (Platform services controller). A malicious actor with admin access on vCenter server may exploit this issue to execute arbitrary code on the underlying operating system that hosts the vCenter Server.

El servidor vCenter contiene una vulnerabilidad de deserialización no segura en el PSC (Platform services controller). Un actor malicioso con acceso de administrador en el servidor vCenter puede aprovechar este problema para ejecutar código arbitrario en el sistema operativo subyacente que aloja el servidor vCenter

*Credits: N/A

CVSS Scores

NISTv3.1 9.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2022-05-25 CVE Reserved
2022-10-07 CVE Published
2024-04-29 EPSS Updated
2024-08-03 CVE Updated
2024-08-03 First Exploit
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-502: Deserialization of Untrusted Data

CAPEC

References (2)

URL	Tag	Source

URL	Date	SRC
https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1587	2024-08-03

URL	Date	SRC

URL	Date	SRC
https://www.vmware.com/security/advisories/VMSA-2022-0025.html	2022-10-11

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				< 6.5 Search vendor "Vmware" for product "Vcenter Server" and version " < 6.5"		-		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		-		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		a		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		b		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		c		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		d		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		update1		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		update1b		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		update1c		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		update1d		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		update1e		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		update1g		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		update2		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		update2b		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		update2c		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		update2d		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		update2g		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		update3		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		update3d		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		update3f		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		update3k		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		update3n		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		update3p		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		update3q		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		update3r		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		update3s		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		update3t		Affected
Vmware Search vendor "Vmware"		Vcenter Server Search vendor "Vmware" for product "Vcenter Server"				6.5 Search vendor "Vmware" for product "Vcenter Server" and version "6.5"		update3u		Affected