VMWare patches bug that put many large networks at risk

By Lance Whitney for TechRepublic
Thursday, February 25, 2021

• 3.3k
• 38
• 38
• 38
• 18
• More
• 38
• 38

Companies that use VMWare Server are strongly urged to check VMWare's advisory page for more details on these flaws and to download and install the necessary updates to patch their systems. Further, Positive Technologies advises companies to remove vCenter Server interfaces from their perimeters if they are located as such and allocate them to a separate VLAN with a limited access list in the internal network.

"Exploitation simplicity and the impact of the vulnerability are both highly critical, permitting even unskilled attackers to take control over entire corporate networks within minutes," Ilia Kolochenko, CEO of security provider ImmuniWeb, told TechRepublic. "It is, however, fair to say that normally vSphere Client web interface should not be accessible from the internet or at least should have strict IP filtering rules. Therefore, compromised organizations undoubtedly share responsibility for being breached via this vulnerability." Read Full Article