VYPR
← All advisories
High severity8.8NVD Advisory· Published Oct 16, 2024· Updated Jun 17, 2026

CVE-2024-38814

CVE-2024-38814

Description

An authenticated SQL injection vulnerability in VMware HCX was privately reported to VMware. A malicious authenticated user with non-administrator privileges may be able to enter specially crafted SQL queries and perform unauthorized remote code execution on the HCX manager. Updates are available to remediate this vulnerability in affected VMware products.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • VMware/Vmware Hcx2 versions
    cpe:2.3:a:vmware:vmware_hcx:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:vmware:vmware_hcx:*:*:*:*:*:*:*:*range: >=4.8.0,<=4.8.2
    • cpe:2.3:a:vmware:vmware_hcx:4.10.0:*:*:*:*:*:*:*
  • VMware/HCXcpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)
  • Broadcom Corporation/HCXllm-create

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.