Unrated severityCISA KEVNVD Advisory· Published Oct 25, 2023· Updated Oct 21, 2025
VMware vCenter Server Out-of-Bounds Write Vulnerability
CVE-2023-34048
Description
vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds write potentially leading to remote code execution.
Affected products
2- VMware/VMware vCenter Serverv5Range: 8.0
- VMware/VMware Cloud Foundation (VMware vCenter Server)v5Range: 5.x
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.