CVE-2021-21972 PoC — VMware vSphere Client 路径遍历漏洞

Source

https://github.com/GuayoyoCyber/CVE-2021-21972

Associated Vulnerability

Title:VMware vSphere Client 路径遍历漏洞 (CVE-2021-21972)
Description:The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server. This affects VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2).

Description

Nmap script to check vulnerability CVE-2021-21972

Readme

# CVE-2021-21972
Nmap script to check vulnerability CVE-2021-21972 - vCenter Server RCE

## Vulnerability References:

https://app.howlermonkey.io/vulnerabilities/CVE-2021-21972

https://www.vmware.com/security/advisories/VMSA-2021-0002.html


## Example

nmap -p443 --script cve-2021-21972.nse --script-args vulns.showall IP

![final_603e5630e2c0df009ad51383_569264](https://user-images.githubusercontent.com/63943179/109674961-1c789300-7b56-11eb-891c-abd1078ae5dd.gif)



## Credits

Built on top of the script develop by Alex Hernandez aka [@alt3kx](https://github.com/alt3kx) - [https://github.com/alt3kx/CVE-2021-21972](https://github.com/alt3kx/CVE-2021-21972)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!