CVE-2021-21976

2021-02-1120:34:45

vmware

www.cve.org

7.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.6%

JSON

vSphere Replication 8.3.x prior to 8.3.1.2, 8.2.x prior to 8.2.1.1, 8.1.x prior to 8.1.2.3 and 6.5.x prior to 6.5.1.5 contain a post-authentication command injection vulnerability which may allow an authenticated admin user to perform a remote code execution.

CNA Affected

[
  {
    "product": "vSphere Replication",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "vSphere Replication 8.3.x prior to 8.3.1.2, 8.2.x prior to 8.2.1.1, 8.1.x prior to 8.1.2.3 and 6.5.x prior to 6.5.1.5"
      }
    ]
  }
]

References

www.vmware.com/security/advisories/VMSA-2021-0001.html