Security News > 2021 > February > Vulnerability in VMware vSphere Replication Can Facilitate Attacks on Enterprises

VMware last week informed customers about the availability of patches for a potentially serious vulnerability affecting its vSphere Replication product.

vSphere Replication, a VMware vSphere component, is a virtual machine replication engine designed for data protection and disaster recovery.

VMware has told customers that several versions of the product are affected by a high-severity command injection vulnerability that can be exploited by a hacker with admin privileges to execute shell commands on the underlying system.

Patches have been released for each of the affected versions of vSphere Replication.

"When carrying out an attack on a company infrastructure, an attacker can detect the VMware vSphere Replication instance at the perimeter of its network and, as the used password is weak, for example, he can guess credentials to enter the administrator interface," Dimitrenko explained.

"After gaining authorized access, the attacker will be able to exploit this vulnerability and execute arbitrary commands on the server with maximum privileges."

News URL

http://feedproxy.google.com/~r/Securityweek/~3/TI47Jz04heE/vulnerability-vmware-vsphere-replication-can-facilitate-attacks-enterprises