PlatformPlansPartners
Resources
ToolsBlogDocs
Labs
CVE ForecastOpservantAll Research →
Sign Up →
critical·Product Based Web Vulnerabilities·Updated Oct 29, 2025

VMware vCenter Server - Out-of-Bounds Write

Est. Time~10 seconds
Scan TypeGroup Scan
Targetsdomain, subdomain, ipv4
CostFree
2.9k
Times Used
continuous scan runs
0
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
CVECVE-2023-34048
9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.

vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds write potentially leading to remote code execution.

Attack Vector
Network
Privileges Req.
None
User Interaction
None
Affected
VMware vCenter Serverby VMware
AFFECTED< 8.0U2→SAFE ✓≥ 8.0U2
VMware Cloud Foundation (VMware vCenter Server)by VMware
5.x
vcenter_serverby vmware
AFFECTED< 7.0U3o→SAFE ✓≥ 7.0U3o
vcenter_serverby vmware
AFFECTED< 8.0U2→SAFE ✓≥ 8.0U2
Updated Sep 9, 2026View on NVD →
Similar Tools
critical
VMware Operations Manager - Remote Code Execution (Apache Log4j)
→critical
VMware HCX - Remote Code Execution (Apache Log4j)
→critical
VMware VCenter - Remote Code Execution (Apache Log4j)
→critical
VMware Horizon - JNDI Remote Code Execution (Apache Log4j)
→critical
VMware NSX - Remote Code Execution (Apache Log4j)
→critical
Flowise < 3.1.2 - node-custom-function Unauthorized RCE
→critical
CVE-2022-40619 Scanner
→critical
Progress ADC LoadMaster - Command Injection
→

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.

VMware vCenter Server - Out-of-Bounds Write CVE-2023-34048 Scanner | S4E