ºÚÁÏÕýÄÜÁ¿

On June 4, 2021, Cybersecurity and Infrastructure Security Agency (CISA) published an alert, , related to the likelihood that cyber threat actors are attempting to exploit CVE-2021-21985, a remote code execution vulnerability in VMware vCenter Server and VMware Cloud Foundation.

Although patches were made on May 25, 2021, unpatched systems remain an attractive target and attackers can exploit this vulnerability to take control of an unpatched system.  VMware vCenter Server and VMware Cloud Foundation are part of the underlying infrastructure for most organizations with on-premises network management. 

Reference(s):
, , , ,

CVE(s)
CVE-2021-21985

Recommendations:
CISA encourages state and local governments, critical infrastructure entities, including healthcare, and other private sector organizations to review VMSA-21-0010, , and for more information about the vulnerability and apply the necessary updates as soon as possible, even if out-of-cycle work is required.

If your organization cannot immediately apply the update, then apply the  in the interim. 

Sources

Alert ID eaa2a133