Broadcom has addressed a critical vulnerability in VMware vCenter Server (CVE-2024-38812) that allows attackers to achieve remote code execution on unpatched servers via specially crafted network packets. This heap overflow issue, discovered during a hacking contest, affects various VMware products and can be exploited without user interaction. Security updates are now available, and organizations are advised to install them to protect their systems.
Relevant URL: https://www.bleepingcomputer.com/news/security/broadcom-fixes-critical-rce-bug-in-vmware-vcenter-server/amp/