CVE-2021-21972

CISA KEV RANSOMWARE

ACT NOW Priority: 0.00 BB Relevance: 0/100

Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

VMware vCenter Server vSphere Client contains a remote code execution vulnerability in a vCenter Server plugin which allows an attacker with network access to port 443 to execute commands with unrestricted privileges on the underlying operating system.

CISA Known Exploited Vulnerability

Vendor / Product VMware — vCenter Server

Date Added 2021-11-03

Remediation Due 2021-11-17

Ransomware Use CONFIRMED

https://nvd.nist.gov/vuln/detail/CVE-2021-21972

Weakness Classification (1)

CWE-22

Affected Software (43)

Vendor	Product	Version
vmware	cloud_foundation	3.0 – 3.10.1.2
vmware	cloud_foundation	4.0 – 4.2
vmware	vcenter_server	6.5
vmware	vcenter_server	6.5
vmware	vcenter_server	6.5
vmware	vcenter_server	6.5
vmware	vcenter_server	6.5
vmware	vcenter_server	6.5
vmware	vcenter_server	6.5
vmware	vcenter_server	6.5
vmware	vcenter_server	6.5
vmware	vcenter_server	6.5
vmware	vcenter_server	6.5
vmware	vcenter_server	6.5
vmware	vcenter_server	6.5
vmware	vcenter_server	6.5
vmware	vcenter_server	6.5
vmware	vcenter_server	6.5
vmware	vcenter_server	6.5
vmware	vcenter_server	6.5
vmware	vcenter_server	6.5
vmware	vcenter_server	6.7
vmware	vcenter_server	6.7
vmware	vcenter_server	6.7
vmware	vcenter_server	6.7
vmware	vcenter_server	6.7
vmware	vcenter_server	6.7
vmware	vcenter_server	6.7
vmware	vcenter_server	6.7
vmware	vcenter_server	6.7