CVE-2021-21972
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-21972
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server. This affects VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2).
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
VMware vSphere Client 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
VMware vSphere Client是美国威睿（VMware）公司的一个应用软件。提供虚拟化管理。 VMware vSphere Client存在路径遍历漏洞，未授权的攻击者可以通过开放443端口的服务器向vCenter Server发送精心构造的请求，从而在目标系统上远程执行恶意代码。以下产品和版本受到影响：vSphere Client 6.5、vSphere Client 6.7、vSphere Client 7.0、VMware Cloud Foundation（vCenter Server）
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | VMware vCenter Server | 7.x before 7.0 U1c | - | |
| - | VMware Cloud Foundation | 4.x before 4.2 | - |
II. Public POCs for CVE-2021-21972
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | NSE scripts to detect CVE-2020-1350 SIGRED and CVE-2020-0796 SMBGHOST, CVE-2021-21972, proxyshell, CVE-2021-34473 | https://github.com/psc4re/NSE-scripts | POC Details |
| 2 | None | https://github.com/QmF0c3UK/CVE-2021-21972-vCenter-6.5-7.0-RCE-POC | POC Details |
| 3 | CVE-2021-21972 Exploit | https://github.com/NS-Sp4ce/CVE-2021-21972 | POC Details |
| 4 | None | https://github.com/yaunsky/CVE-2021-21972 | POC Details |
| 5 | Proof of Concept Exploit for vCenter CVE-2021-21972 | https://github.com/horizon3ai/CVE-2021-21972 | POC Details |
| 6 | A vulnerability scanner that detects CVE-2021-21972 vulnerabilities. | https://github.com/Osyanina/westone-CVE-2021-21972-scanner | POC Details |
| 7 | None | https://github.com/alt3kx/CVE-2021-21972 | POC Details |
| 8 | CVE-2021-21972 | https://github.com/milo2012/CVE-2021-21972 | POC Details |
| 9 | CVE-2021-21972 vCenter-6.5-7.0 RCE POC | https://github.com/Udyz/CVE-2021-21972 | POC Details |
| 10 | VMware vCenter 未授权RCE（CVE-2021-21972） | https://github.com/conjojo/VMware_vCenter_UNAuthorized_RCE_CVE-2021-21972 | POC Details |
| 11 | None | https://github.com/L-pin/CVE-2021-21972 | POC Details |
| 12 | VMware vCenter Server远程代码执行漏洞 (CVE-2021-21972)批量检测脚本 | https://github.com/B1anda0/CVE-2021-21972 | POC Details |
| 13 | CVE-2021-21972 | https://github.com/renini/CVE-2021-21972 | POC Details |
| 14 | None | https://github.com/stevenp322/cve-2021-21972 | POC Details |
| 15 | Nmap script to check vulnerability CVE-2021-21972 | https://github.com/GuayoyoCyber/CVE-2021-21972 | POC Details |
| 16 | None | https://github.com/JMousqueton/Detect-CVE-2021-21972 | POC Details |
| 17 | VMware vCenter CVE-2021-21972 Tools | https://github.com/robwillisinfo/VMware_vCenter_CVE-2021-21972 | POC Details |
| 18 | 漏洞利用，Vmware vCenter 6.5-7.0 RCE（CVE-2021-21972），上传冰蝎3，getshell | https://github.com/Ma1Dong/vcenter_rce | POC Details |
| 19 | None | https://github.com/d3sh1n/cve-2021-21972 | POC Details |
| 20 | CVE-2021-21972 related vulnerability code | https://github.com/ByZain/CVE-2021-21972 | POC Details |
| 21 | CVE-2021-21972 Unauthorized RCE in VMware vCenter metasploit exploit script | https://github.com/TaroballzChen/CVE-2021-21972 | POC Details |
| 22 | None | https://github.com/password520/CVE-2021-21972 | POC Details |
| 23 | [CVE-2021-21972] VMware vSphere Client Unauthorized File Upload to Remote Code Execution (RCE) | https://github.com/murataydemir/CVE-2021-21972 | POC Details |
| 24 | POC exploit for CVE-2021-21972 | https://github.com/pettyhacks/vSphereyeeter | POC Details |
| 25 | None | https://github.com/haiclover/CVE-2021-21972 | POC Details |
| 26 | CVE-2021-21972 – ᴠᴍᴡᴀʀᴇ ᴄʟɪᴇɴᴛ ᴜɴᴀᴜᴛʜᴏʀɪᴢᴇᴅ ᴄᴏᴅᴇ ɪɴᴊᴇᴄᴛɪᴏɴ (ʀᴄᴇ) | https://github.com/orangmuda/CVE-2021-21972 | POC Details |
| 27 | None | https://github.com/user16-et/cve-2021-21972_PoC | POC Details |
| 28 | None | https://github.com/haidv35/CVE-2021-21972 | POC Details |
| 29 | None | https://github.com/ZTK-009/CVE-2021-21972 | POC Details |
| 30 | CVE-2021-21972 vCenter-6.5-7.0 RCE POC | https://github.com/TAI-REx/CVE-2021-21972 | POC Details |
| 31 | VMware vCenter vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server. This affects VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2). | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21972.yaml | POC Details |
| 32 | None | https://github.com/Threekiii/Awesome-POC/blob/master/%E4%BA%91%E5%AE%89%E5%85%A8%E6%BC%8F%E6%B4%9E/VMware%20vCenter%20Server%20%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%20CVE-2021-21972.md | POC Details |
| 33 | Looking at current high-impact vulnerabilities, let's use the VMware vCenter Server CVE-2021-21972 (CVSS 9.8) as our base. This is a publicly known RCE with patches available, perfect for demonstrating CTT enhancements. | https://github.com/SimoesCTT/CTT-enhanced-VMware-vCenter | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-21972
请登录查看更多情报信息。
- https://www.vmware.com/security/advisories/VMSA-2021-0002.htmlx_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2021-21972
Same Patch Batch · n/a · 2021-02-24 · 10 CVEs total
| CVE-2020-11987 | Apache Batik 代码问题漏洞 | |
| CVE-2021-27645 | GNU C Library和glibc 资源管理错误漏洞 | |
| CVE-2020-12702 | eWeLink mobile application 加密问题漏洞 | |
| CVE-2021-3355 | LightCMS v跨站脚本漏洞 | |
| CVE-2020-28599 | Torsten Paul Openscad 缓冲区错误漏洞 | |
| CVE-2021-22667 | Advantech BB-ESWGP506-2SFP-T 信任管理问题漏洞 | |
| CVE-2021-21973 | VMware vCenter Server 代码问题漏洞 | |
| CVE-2021-21974 | 威睿 VMware ESXi 缓冲区错误漏洞 | |
| CVE-2020-11988 | Apache XmlGraphics Commons 代码问题漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2021-21972
No comments yet