Vulnerability Name:

CVE-2021-21985 (CCN-202404)

Assigned:2021-05-25
Published:2021-05-25
Updated:2021-09-14
Summary:The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server.
CVSS v3 Severity:9.8 Critical (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
9.1 Critical (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
9.8 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
9.1 Critical (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
10.0 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-20
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2021-21985

Source: MISC
Type: Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/162812/VMware-Security-Advisory-2021-0010.html

Source: MISC
Type: Exploit, Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/163487/VMware-vCenter-Server-Virtual-SAN-Health-Check-Remote-Code-Execution.html

Source: XF
Type: UNKNOWN
vmware-cve202121985-cmd-exec(202404)

Source: CCN
Type: Packet Storm Security [07-13-2021]
VMware vCenter Server Virtual SAN Health Check Remote Code Execution

Source: CCN
Type: CYBERSECURITY & INFRASTRUCTURE SECURITY AGENCY
KNOWN EXPLOITED VULNERABILITIES CATALOG

Source: CCN
Type: IBM Security Bulletin 6507111 (Cloud Pak System)
Multiple Vulnerabilities in VMware vCenter affect IBM Cloud Pak System

Source: CCN
Type: VMware Security Advisory VMSA-2021-0010
VMware vCenter Server updates address remote code execution and authentication vulnerabilities (CVE-2021-21985, CVE-2021-21986)

Source: MISC
Type: Vendor Advisory
https://www.vmware.com/security/advisories/VMSA-2021-0010.html

Vulnerable Configuration:Configuration 1:
  • cpe:/a:vmware:vcenter_server:6.5:-:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.5:update1:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.5:update1b:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.5:update1c:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.5:a:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.5:b:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.5:c:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.5:d:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.5:e:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.5:f:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.5:update1:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.5:update1b:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.5:update1c:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.5:update1d:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.5:update1e:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.5:update1g:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.5:update2:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.5:update2b:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.5:update2c:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.5:update2d:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.5:update2g:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.5:update3:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.5:update3d:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.5:update3f:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.5:update3k:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.5:update3n:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.7:-:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.7:a:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.7:b:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.7:d:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.7:update1:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.7:update1b:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.7:update2:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.7:update2a:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.7:update2c:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.7:update3:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.7:update3a:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.7:update3b:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.7:update3f:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.7:update3g:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.7:update3j:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.7:update3l:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.7:update3m:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:7.0:-:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:7.0:a:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:7.0:b:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:7.0:c:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:7.0:d:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:7.0:update1:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:7.0:update1a:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:7.0:update1c:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:7.0:update1d:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:7.0:update2:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:7.0:update2a:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/a:vmware:cloud_foundation:*:*:*:*:*:*:*:* (Version >= 3.0 and < 3.10.2.1)
  • OR cpe:/a:vmware:cloud_foundation:*:*:*:*:*:*:*:* (Version >= 4.0 and < 4.2.1)

    • Configuration CCN 1:
  • cpe:/a:vmware:vcenter_server:6.5:*:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:6.7:*:*:*:*:*:*:*
  • OR cpe:/a:vmware:cloud_foundation:3.0:*:*:*:*:*:*:*
  • OR cpe:/a:vmware:cloud_foundation:4.0:*:*:*:*:*:*:*
  • OR cpe:/a:vmware:vcenter_server:7.0:-:*:*:*:*:*:*
  • AND
  • cpe:/a:ibm:cloud_pak_system:2.3:*:*:*:*:*:*:*
  • OR cpe:/a:ibm:cloud_pak_system:2.3.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:ibm:cloud_pak_system:2.3.1.1:*:*:*:*:*:*:*
  • OR cpe:/a:ibm:cloud_pak_system:2.3.2.0:*:*:*:*:*:*:*
  • OR cpe:/a:ibm:cloud_pak_system:2.3.3.0:*:*:*:*:*:*:*
  • OR cpe:/a:ibm:cloud_pak_system:2.3.3.1:*:*:*:*:*:*:*
  • OR cpe:/a:ibm:cloud_pak_system:2.3.3.2:*:*:*:*:*:*:*
  • OR cpe:/a:ibm:cloud_pak_system:2.3.3.3:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    vmware vcenter server 6.5 -
    vmware vcenter server 6.5 update1
    vmware vcenter server 6.5 update1b
    vmware vcenter server 6.5 update1c
    vmware vcenter server 6.5 a
    vmware vcenter server 6.5 b
    vmware vcenter server 6.5 c
    vmware vcenter server 6.5 d
    vmware vcenter server 6.5 e
    vmware vcenter server 6.5 f
    vmware vcenter server 6.5 update1
    vmware vcenter server 6.5 update1b
    vmware vcenter server 6.5 update1c
    vmware vcenter server 6.5 update1d
    vmware vcenter server 6.5 update1e
    vmware vcenter server 6.5 update1g
    vmware vcenter server 6.5 update2
    vmware vcenter server 6.5 update2b
    vmware vcenter server 6.5 update2c
    vmware vcenter server 6.5 update2d
    vmware vcenter server 6.5 update2g
    vmware vcenter server 6.5 update3
    vmware vcenter server 6.5 update3d
    vmware vcenter server 6.5 update3f
    vmware vcenter server 6.5 update3k
    vmware vcenter server 6.5 update3n
    vmware vcenter server 6.7 -
    vmware vcenter server 6.7 a
    vmware vcenter server 6.7 b
    vmware vcenter server 6.7 d
    vmware vcenter server 6.7 update1
    vmware vcenter server 6.7 update1b
    vmware vcenter server 6.7 update2
    vmware vcenter server 6.7 update2a
    vmware vcenter server 6.7 update2c
    vmware vcenter server 6.7 update3
    vmware vcenter server 6.7 update3a
    vmware vcenter server 6.7 update3b
    vmware vcenter server 6.7 update3f
    vmware vcenter server 6.7 update3g
    vmware vcenter server 6.7 update3j
    vmware vcenter server 6.7 update3l
    vmware vcenter server 6.7 update3m
    vmware vcenter server 7.0 -
    vmware vcenter server 7.0 a
    vmware vcenter server 7.0 b
    vmware vcenter server 7.0 c
    vmware vcenter server 7.0 d
    vmware vcenter server 7.0 update1
    vmware vcenter server 7.0 update1a
    vmware vcenter server 7.0 update1c
    vmware vcenter server 7.0 update1d
    vmware vcenter server 7.0 update2
    vmware vcenter server 7.0 update2a
    vmware cloud foundation *
    vmware cloud foundation *
    vmware vcenter server 6.5
    vmware vcenter server 6.7
    vmware cloud foundation 3.0
    vmware cloud foundation 4.0
    vmware vcenter server 7.0 -
    ibm cloud pak system 2.3
    ibm cloud pak system 2.3.0.1
    ibm cloud pak system 2.3.1.1
    ibm cloud pak system 2.3.2.0
    ibm cloud pak system 2.3.3.0
    ibm cloud pak system 2.3.3.1
    ibm cloud pak system 2.3.3.2
    ibm cloud pak system 2.3.3.3