SFCB (Small Footprint CIM Broker) as used in ESXi has an authentication bypass vulnerability. A malicious actor with network access to port 5989 on ESXi may exploit this issue to bypass SFCB authentication by sending a specially crafted request.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Vmsa 2021 0014 | — | Upgrade VMware ESXi 6.7 to build number 17700523Upgrade VMware ESXi 7.0.1 to build number 17630552Upgrade VMware ESXi 7.0.0 to build number 17630552Upgrade VMware ESXi 7.0.2 to build number 17630552Upgrade VMware ESXi 6.5 to build number 18071574 | Jul 26, 2021 | Jul 13, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub