Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wizblogWiz BlogWIZBLOG:05A010F326D66882817F8342D9DC6F89
HistoryFeb 07, 2023 - 12:26 p.m.

Ransomware attacks targeting VMware ESXi servers: everything you need to know

2023-02-0712:26:52
Wiz Blog
www.wiz.io
21
ransomware
vmware
esxi
cve-2021-21974
exploitation
security patching
vigilance

CVSS2

5.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.931

Percentile

99.1%

JSON

Recent attacks leverage CVE-2021-21974 to install ransomware on VMWare ESXi servers. Security teams are advised to patch and stay vigilant for indicators of compromise.

Related

ibm 1
thn 4
rapid7blog 4
nvd 1
githubexploit 2
zdi 1
cvelist 1
packetstorm 1
nessus 1
hivepro 1
cve 1
prion 1
attackerkb 1
redhatcve 1
zdt 1
checkpoint_advisories 1
trellix 4
seebug 1
qualysblog 1
vmware 1
cisa 1
threatpost 1
malwarebytes 2
ibm
ibm
Security Bulletin: Vulnerability identified in VMware component affects Cloud Pak System (CVE-2021-21974)
2023-03-20 11:30:50
thn
thn
New Wave of Ransomware Attacks Exploiting VMware Bug to Target ESXi Servers
2023-02-04 05:30:00
New ESXiArgs Ransomware Variant Emerges After CISA Releases Decryptor Tool
2023-02-11 13:36:00
VMware Finds No Evidence of 0-Day in Ongoing ESXiArgs Ransomware Spree
2023-02-07 10:21:00
rapid7blog
rapid7blog
Nearly 19,000 ESXi Servers Still Vulnerable to CVE-2021-21974
2023-02-09 18:36:28
Ransomware Campaign Compromising VMware ESXi Servers
2023-02-06 15:00:57
VMware vCenter Server CVE-2021-21972 Remote Code Execution Vulnerability: What You Need to Know
2021-02-24 22:22:14
nvd
nvd
CVE-2021-21974
2021-02-24 17:15:16
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Vmware Cloud Foundation
2023-02-08 10:46:37
Exploit for Out-of-bounds Write in Vmware Cloud Foundation
2023-02-04 21:23:20
zdi
zdi
VMware ESXi SLP Heap-based Buffer Overflow Remote Code Execution Vulnerability
2021-02-24 00:00:00
cvelist
cvelist
CVE-2021-21974
2021-02-24 16:57:33
packetstorm
packetstorm
VMware ESXi OpenSLP Heap Overflow
2021-06-03 00:00:00
nessus
nessus
ESXi 6.5 / 6.7 / 7.0 RCE (VMSA-2021-0002)
2021-02-25 00:00:00
hivepro
hivepro
The ESXiArgs ransomware attack is targeting VMware ESXi servers globally
2023-02-09 06:52:24
cve
cve
CVE-2021-21974
2021-02-24 17:15:16
prion
prion
Heap overflow
2021-02-24 17:15:00
attackerkb
attackerkb
CVE-2021-21974
2021-02-24 00:00:00
redhatcve
redhatcve
CVE-2021-21974
2023-02-07 18:56:17
zdt
zdt
VMware ESXi OpenSLP Heap Overflow Exploit
2021-06-03 00:00:00
checkpoint_advisories
checkpoint_advisories
VMWare OpenSLP Heap Buffer Overflow (CVE-2019-5544; CVE-2021-21974)
2020-02-26 00:00:00
trellix
trellix
Global ESXiArgs ransomware attack on the back of a two-year-old vulnerability
2023-02-09 00:00:00
Global ESXiArgs ransomware attack on the back of a two-year-old vulnerability
2023-02-09 00:00:00
The Bug Report – February 2023 Edition
2023-03-01 00:00:00
seebug
seebug
ESXi OpenSLPε †ζΊ’ε‡ΊζΌζ΄žοΌˆCVE-2021-21974οΌ‰
2021-05-25 00:00:00
qualysblog
qualysblog
Ransomware Targets Outdated VMware ESXi Hypervisors: Protect Your Systems Now!
2023-02-08 00:39:02
vmware
vmware
VMware ESXi and vCenter Server updates address multiple security vulnerabilities (CVE-2021-21972, CVE-2021-21973, CVE-2021-21974)
2021-02-23 00:00:00
cisa
cisa
VMware Releases Multiple Security Updates
2021-02-24 00:00:00
threatpost
threatpost
VMWare Patches Critical RCE Flaw in vCenter Server
2021-02-24 17:14:55
malwarebytes
malwarebytes
[update]Two year old vulnerability used in ransomware attack against VMware ESXi
2023-02-06 04:00:00
New ESXiArgs encryption routine outmaneuvers recovery methods
2023-02-14 06:00:00

CVSS2

5.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.931

Percentile

99.1%

JSON
Related for WIZBLOG:05A010F326D66882817F8342D9DC6F89
ibm1thn4rapid7blog4nvd1githubexploit2zdi1cvelist1packetstorm1nessus1hivepro1cve1prion1attackerkb1redhatcve1zdt1checkpoint_advisories1trellix4seebug1qualysblog1vmware1cisa1threatpost1malwarebytes2