May 26, 2021

A vulnerability with remote code was found in a widely used VMware product on Tuesday.

The flaw is in the vCenter Server, a tool used to organize virtualization in large data centers.

The problem was found and fixed the same day.

According to a VMware advisor, vCenter machines that use standard configurations have a bug in many networks that allows malicious code to be executed.

This happens when the machines are accessible on a port that is exposed to the Internet.

The vulnerability has a severity score of 9.8 out of 10.

The vulnerability is tracked as CVE-2021-21985.

CVE-2021-21985 is the second vCenter vulnerability this year with a 9.8 rating.

vCenter versions 6.5, 6.7, and 7.10 are all affected, and users with these machines should focus on this patch.

For more information, read the original story in arstechnica.