CVE-2021-21974: Demonstrating Remote Code Execution on VMware ESXi Server

Опубликовано: 02 Март 2021
на канале: Zero Day Initiative
15,935
84

This video demonstrates CVE-2021-21974 - a remote code execution bug in VMware ESXi servers. A vulnerability in the Service Location Protocol (SLP) service allows an attacker to gain root on a system. It can also be leveraged for a guest-to-host escape.

For full details on the bug used in this video, read the blog at:
https://www.zerodayinitiative.com/blo...