VMware vCenter Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in VMware vCenter. This issue allows an authenticated actor with permission to make API calls for guest operating system customization to create a denial-of-service condition.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing affected vCenter services to become unavailable or unresponsive.

Remediation

Users can upgrade to VMware vCenter versions 8.0 U3g or 7.0 U3v. VMware Cloud Foundation users should refer to the VMware Cloud Foundation Patching Guide: KB88287. VMware Telco Cloud Platform and Telco Cloud Infrastructure users can consult KB405542 for patching instructions.