What is CVE-2023-34048?

CVE-2023-34048 is a critical vulnerability affecting vCenter Server software, which can potentially lead to remote code execution. A malicious actor with network access to vCenter Server can exploit this out-of-bounds write vulnerability in the implementation of the DCERPC protocol. The vulnerability impacts various versions of vCenter Server software, posing a significant risk to affected systems.

Who is impacted by CVE-2023-34048?

If you're using vCenter Server versions 4.0 to 5.5 or version 7.0 and its subsequent updates, your system may be at risk. This vulnerability can potentially lead to remote code execution, posing a significant threat to the security of your system. It's essential to stay informed about this vulnerability and take necessary precautions to protect your system.

What should I do if I’m affected?

If you're affected by the CVE-2023-34048 vulnerability, it's crucial to take action to protect your system. Follow these simple steps to mitigate the risk:

1. Identify if your vCenter Server version is affected by checking the list of impacted versions.

2. Visit the VMware Security Advisory page to find the appropriate updates for your system.

3. Apply the recommended updates to your vCenter Server deployment as soon as possible.

4. Monitor for any additional updates or guidance from VMware and CISA.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2023-34048 vulnerability, known as "VMware vCenter Server Out-of-Bounds Write Vulnerability," is indeed present in CISA's Known Exploited Vulnerabilities Catalog. It was added to the catalog on January 22, 2024, and the due date for taking action is February 12, 2024. To address this vulnerability, organizations must apply mitigations per vendor instructions or discontinue the use of the product if mitigations are unavailable.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-787, an out-of-bounds write issue in vCenter Server's DCERPC protocol implementation.

Learn More

For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or refer to the resources listed below.

• VMware Security Advisory

• BOD 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities

• Known Exploited Vulnerabilities Catalog