CRITICAL CISA KEV

CVE-2021-22005

CVSS v3

9.8

CRITICAL

EPSS Score

94.5%

exploit probability

CISA KEV

Yes

known exploited

Exploitation

SSVC status

Description

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file.

CISA Known Exploited Vulnerability

Date Added
11/3/2021
Patch Due Date
11/17/2021
Ransomware Use
Known

Technical details

Published
9/23/2021

Frequently asked questions

What is CVE-2021-22005?

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file.

Is CVE-2021-22005 actively exploited?

Yes. CVE-2021-22005 is on the CISA Known Exploited Vulnerabilities (KEV) catalog, meaning it has been confirmed as actively exploited in the wild. CISA requires federal agencies to patch by 11/17/2021.

What is the CVSS score for CVE-2021-22005?

CVE-2021-22005 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2021-22005 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.