CVE-2024-22274 PoC — VMware vCenter Server 安全漏洞

Source

https://github.com/mbadanoiu/CVE-2024-22274

Associated Vulnerability

Title:VMware vCenter Server 安全漏洞 (CVE-2024-22274)
Description:The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the underlying operating system.

Description

CVE-2024-22274: Authenticated Remote Code Execution in VMware vCenter Server

Readme

# CVE-2024-22274: Authenticated Remote Code Execution in VMware vCenter Server

The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the underlying operating system as the "root" user.

### Vendor Disclosure:

The vendor's disclosure for this vulnerability can be found [here](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24308).

### Requirements:

This vulnerability requires:
<br/>
- Valid credentials for user with "admin" role

### Proof Of Concept:

More details and the exploitation process can be found in this [PDF](https://github.com/mbadanoiu/CVE-2024-22274/blob/main/VMware%20vCenter%20-%20CVE-2024-22274.pdf).

File Snapshot


 [4.0K]  /data/pocs/3d324f297b00449859597a33149c158675c43d24
├── [ 845]  README.md
└── [1.1M]  VMware vCenter - CVE-2024-22274.pdf

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!