CVE-2021-21972—VMware vCenter Server Remote Code Execution Vulnerability

PUBLISHEDvulnerability record
2021-11-03 · last modified June 21, 2025

Metadata

CVE ID:
CVE-2021-21972
Project:
VMware
Product:
vCenter Server
Date Added:
2021-11-03
Due Date:
2021-11-17
Last Updated:
June 21, 2025

Vulnerability Name

VMware vCenter Server Remote Code Execution Vulnerability

Description

VMware vCenter Server vSphere Client contains a remote code execution vulnerability in a vCenter Server plugin which allows an attacker with network access to port 443 to execute commands with unrestricted privileges on the underlying operating system.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
KNOWN

Action

Apply updates per vendor instructions.

Additional Notes

  • https://nvd.nist.gov/vuln/detail/CVE-2021-21972

Related News Articles

Related Weaknesses

browse all CVEs