Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2024-38814

CVSS 8.8 · High EPSS 27.98% · P97
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2024-38814

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An authenticated SQL injection vulnerability in VMware HCX was privately reported to VMware. A malicious authenticated user with non-administrator privileges may be able to enter specially crafted SQL queries and perform unauthorized remote code execution on the HCX manager.  Updates are available to remediate this vulnerability in affected VMware products.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: NVD (National Vulnerability Database)
Vulnerability Title
VMware HCX SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
VMware HCX是美国威睿（VMware）公司的一个应用程序移动平台。旨在简化跨数据中心和云的应用程序迁移、工作负载再平衡和业务连续性。 VMware HCX存在SQL注入漏洞，该漏洞源于可能允许具有非管理员权限的恶意认证用户执行特别构造的SQL查询并在HCX管理器上执行未经授权的远程代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
N/AVMware HCX VMware HCX 4.8.0-4.8.2, VMware HCX 4.9.0-4.9.1, VMware HCX 4.10.0 -

II. Public POCs for CVE-2024-38814

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-38814

请登录查看更多情报信息。

Same Patch Batch · N/A · 2024-10-16 · 10 CVEs total

CVE-2016-150409.8 CRITICALKento Post View Counter <= 2.8 - SQL Injection
CVE-2024-44762Webmin Usermin 安全漏洞
CVE-2024-48180ClassCMS 安全漏洞
CVE-2024-48758dingfanzu 安全漏洞
CVE-2024-48744PHPGurukul Teachers Record Management System 代码注入漏洞
CVE-2024-46212Redaxo 安全漏洞
CVE-2024-46605Piwigo 跨站脚本漏洞
CVE-2024-46606Piwigo 安全漏洞
CVE-2024-46213Redaxo 安全漏洞

IV. Related Vulnerabilities

Same product: VMware HCX
Same vendor: N/A
Same weakness: CWE-89

V. Comments for CVE-2024-38814

No comments yet

Leave a comment