CVE-2023-20896

Summary

CVE-2023-20896 is a vulnerability affecting the VMware vCenter Server. The issue lies in the DCERPC protocol implementation, which allows a malicious actor with network access to the server to trigger an out-of-bounds read. This action can result in denial-of-service for specific services, namely vmcad, vmdird, and vmafdd. The vulnerability poses a serious threat, as an attacker can exploit it to disrupt critical functions, adversely impacting an organization's IT infrastructure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.