High Threat Security Alert (A22-10-20): Multiple Vulnerabilities in VMware Cloud Foundation
26 October 2022
VMware has published a security advisory to address multiple vulnerabilities in VMware Cloud Foundation. The list of security updates can be found at: https://www.vmware.com/security/advisories/VMSA-2022-0027.html
Reports indicate that the vulnerability (CVE-2021-39144) is at high risk of exploitation. System administrators are advised to take immediate actions to patch your affected systems to mitigate the elevated risk of cyber attacks.
VMware Cloud Foundation (NSX-V)
Depending on the vulnerabilities being exploited, a successful exploitation of the vulnerabilities could lead to remote code execution, denial of service or information disclosure on the affected system.
The patch for affected product is available. System administrators of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.