RPC: VMware vCenter Server rpc_ss_ndr_contiguous_elt Out-of-bounds Write

This signature detects attempts to exploit a known vulnerability against VMware vCenter. A successful attack can lead to arbitrary code execution.

Extended Description

ThevCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol.A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.

Affected Products

Vmware vcenter_server

Short Name
RPC:VMWARE-RPC-SS-ELT-OOB
Severity
Major
Recommended
False
Recommended Action
Drop
Category
RPC
Keywords
CVE-2024-38812 Out-of-bounds Server VMware Write rpc_ss_ndr_contiguous_elt vCenter
Release Date
01/09/2025
Supported Platforms

srx-branch-19.3

vsrx3bsd-19.2

srx-19.4

vsrx3bsd-19.4

srx-branch-19.4

vsrx-19.4

vsrx-19.2

srx-19.3

Sigpack Version
3772
False Positive
Unknown
Vendors

Vmware

Found a potential security threat?